- /admin/secrets key inside of code should use a dev key with limited access - Either .gigignore should ignore this file or have setenv load the dev key during npm run dev that way production can be separated - Do the same for the .env Apple keys. - Just ensure it does not have more access than needed and production is a different key than dev