--- Quote Start ---
They didn't say drive statically. I think you can connect other pin to these two net directlly.
This should also true for pins nStatus and CONF_DONE.
--- Quote End ---
You should *never* drive nSTATUS. If you "read the fine print" you would note that nSTATUS is an input, if this pin is driven low, then the configuration is cleared.
The most conservative approach to interfacing to the configuration pins on an FPGA using a processor is to actively drive them during programming, and then statically deassert the signals. If you cannot statically deassert the processor pins, eg., because you want to use the SPI interface for accessing other devices, then you should *isolate* the configuration pins by using buffers.
Sure, this is conservative, but buffers are cheap, eg., Fairchild and TI LittleLogic and TinyLogic buffers.
Cheers,
Dave