/prod/... /stage/... /dev/... /feature-xyz/...
And of course, each service per env had different access tokens so apps in the stage env couldn't read prod keys.