Reflect the fact that only production environment really cares about secret token