First of all, are you sure there isn't a way to improve the ergonomics of one without harming the other? Second of all, to the extent that there is a tradeoff,

First of all, are you sure there isn't a way to improve the ergonomics of one without harming the other? Second of all, to the extent that there is a tradeoff, this is essentially a solved problem in every other kind of daemon (from web servers to databases). Make the simple case secure and simple, while making the complicated case (which will require a lot of custom configuration and reading the documentation anyway, not matter what you do) as straightforward as possible.