My approach is: - defaults are sensible (safe and secure) defaults for prod - prod secrets are only available in the prod environment So if you accidentally

My approach is: - defaults are sensible (safe and secure) defaults for prod - prod secrets are only available in the prod environment So if you accidentally end up trying to run with the prod settings in a nonproduction environment it might try and access the prod database server... but it won't get anywhere because it doesn't have those secrets.