Should we actually generate .env file for them, and add the result from `rake secret` to that file? Or, does failing because no `SECRET_KEY_BASE` is a feature?