only allow production push notifs