don't see why not. should probably be removed before build/deploy, but not much harm. also, going to restrict sendmail to https, seems like it wouldn't be accessed otherwise, and infact it shouldn't, since we are sending the key over the connection.