don't do https import in production
only import key files locally