Well, if your app log directly to files on disk (extra bonus if it doesn't respect any verbosity setting) or will only works if secrets are hard coded in config files (even if this could be work-arounded at deploy time probably), I for one will do all that I can to avoid your app reaches production.

Yeah, I work in ops^W platform.