This is how [Gitlab does it](https://github.com/gitlabhq/gitlabhq/blob/master/config/initializers/secret_token.rb) and it makes sense to me. It will also fix the fact that devise.rb's secret key is in version control, as we can just comment out the secret key, which will make it default back to the Rail's app secret_key_base function.