[xyst]

couldn't that be solved by not allowing production access to those clusters? most k8s providers should allow role based access (read/write/deploy)