since we want user images to also be dev images we'll want to have some sort of developer mode that one has to opt into. when not in developer mode: - hide developer tools in kickoff - hide cli tools in kickoff? additionally we might consider to loosen the security hardening when in dev mode. though perhaps it's best if the developer does that as necessary instead of blanket disabling it