[legedemon]

No, it's not that hard. It's more about getting the priorities right.

The developer and production environments should be separated at a deep network level making it very very difficult for anything (rogue script, rogue admin, etc) to access production environment accidentally.