8.31Defensive environment controls

Organizations may add safeguards like:

production credentials only available to production
network restrictions
different OAuth clients
different Salesforce integration users
deployment access controls
environment-specific DNS

So even if somebody accidentally deploys:

QA config

they don't automatically gain production access.

This is defense in depth.