Chris talked about putting these settings in a `settings_secure.py` settings file that we import explicitly.