You guys are treating dev machines as trusted?