Even though we are validating all the data before creating the config file, and this is done in steps, we should consider if we should vlidate the same data in the last step or not? 

Since this is done via API, so it is fairly possible that the data sent for creating config file can be compromised. There are two ways to prevent this: 

1. Keep a track of onboarding validation in a database 
2. OR Do a validation at the end step again