Applying security only to prod