just spent 3 hours debugging a dumb mistake in our frontend code - hardcoded password in a dev environment variable somehow made it into prod. what's next, a git commit from 3 years ago?