Just as bad, I see many developers leaving their Rails app with production secret key.

It just takes more time.