Good point to note...when creating a share, it default to everyone "full control". When cifsconfig_share.cfg is processed on/after boot...it doesn't add everyone "full control"...just what is in the cifs access commands of the file..
When doing migrations...or automating a snapmirror destination (if not VFM or multistore), we script re-creation of of cifs shares...when doing this you have to remove access to everyone "full control" if not needed...for example if using the cifs shares output and the cfg file as a template.. never edit the cfg file though nor copy it... I usually just parse cifs shares output and create a script to re-create shares and remove access to everyone or modify to what cifs share output shows..or leave it in if it is everyone "full control"