Use env secret for production, literal for dev.