code: func (container *Container) ConfigFilePath(configRef swarmtypes.ConfigReference) (string, error) {
  	mounts, err := container.SecretMountPath()
  	if err != nil {
  		return "", err
  	}
  	return filepath.Join(mounts, configRef.ConfigID), nil
  }
docs: // ConfigFilePath returns the path to the on-disk location of a config.
  // On unix, configs are always considered secret