:zap: Yep, this makes a ton of sense, although we should probably also make sure that [`script/server`](https://github.com/cobyism/dciy/blob/master/script/server) kicks things off in `production` mode then, because otherwise just running DCIY locally (so you can *test* DCIY locally) will just run in development mode too, so the secret token will never be used.