Make an env var in .env for the django secret key and make it mandatory to change it (e.g. having no insecure-... key in the repo).