Receiving access-denied as reply for edit-config rpc query

The configuration file looks reasonable to me, just make sure the init file is present no .cdb files are present in the CDB directory before confd restart. The same config file (with minor modifications) worked just fine on my setup. If it does not for you, inspect confd.log and devel.log.