#feature-flags

Any copy holding an API key could email my suppliers

Any copy of my ordering system that could see an API key sent supplier email. I moved the keys into the database and added a release gate that ships with each version, so a dev copy holding a real key still can't act.