Be sure to use the provided doinst.sh. It contains an extra line which ensures that the config file /etc/libtrash.conf has ONLY read permissions, even for root. This is because the config file should never be edited.