If you live outside the US and use A4 paper, you are supposed to modify
gs_init.ps to make this default for ghostscript.

The file pdf_sec.ps is only a dummy, and contains instructions where to
find a real implementation.  It is intended to be replaced with the real
implementation.

It seems to me it would make sense to mark these two files as %config.

(In the case of pdf_sec.ps maybe it is no longer necessary to just ship a
dummy, now that the US export regulations have been changed.  In that case
an alternative method for that file would be to include the real
implementation in the package from the start.)