This is for the other patch, right? We also need ``private.BOKU_SECRET_KEY`` in all the site settings. Maybe that should be filed as a separate bug so ops can set private first