?pp=env exposes your entire dev environment variables. It's enabled by default and immediately compromises your entire development environment keys. Why is this enabled by default? Why is it included in the README.md in fine print?