@aral but then we'd have a lot of web devs porting stuff into production without certs, etc, because "it worked just fine in dev"