typo in release file
write profile.d file to prevent key from being accessed by live server
quotation marks
add note about SSH_KEY being unset before the application is run