Don't default to dev secret key in prod.