In the past, I've used ipython_kernel_config.py configuration files in the same directory as my notebook files, so that if others checked out my files (e.g. with git), they automatically were using the settings I intended.

I also recommended this at https://nbsphinx.readthedocs.io/en/0.8.8/code-cells.html#Plots and those same settings were even used by nbsphinx (via nbconvert), which worked great!

However, some time ago this stopped working, and I just traced this back to 1ec91eb, which mentions a CVE.

So if using a per-directory ipython_kernel_config.py is unsafe, is there safe way to get per-directory settings?