this is to not have `SECRET_KEY_BASE` present in the resulting container as it's only required to run some rake tasks