Deploy guidelines

Would it be better to have a `cap production copy:dotenv` task that would copy the `.env.production` (which would be on gitignore and/or deleted after the command is run) to the server? The reasoning is to not have to ssh into the machine at all.