Add warnings about listing keys in production

I think these could be stronger.