production != public, in most cases. If you are making things public, you likely care about more than just a password, which you'll want to push into an auth g

production != public, in most cases. If you are making things public, you likely care about more than just a password, which you'll want to push into an auth gateway with oauth support, authZ, rate-limiting, etc.