It depends on your environment. If you completely control all the environments your application is deployed in (for example, when you provide a SaaS), it's fairly common.