DEMO_ONLY=not-a-real-secret
