Move IgnoreUnknown definition up to fix bad configuration

On my arch system this definition gave errors. Moving the mystically IgnoreUnknown fixes things. @jlanger @pibis