make sure secret isn't writeable in Chrome
_.global should always be the actual global, not document or IIFE context
HTML.js integration will take a different path
backing off from direct HTML.js integration plans
linting
upgrade package manager support (now with Bower and Component)
no more HTML.js direct usage
anonymous functions make debugging harder
allow for non-browser environments
wrap by reference for easier extension/debugging and don't ever iterate on global
fresh build