Just a simple question but I don\'t really understand: We don\'t have to commit decrypt production key but we need it to decrypt keys locally. So do I have to put prod.decry