Secure by default in production build