“safely” means safe enough that you’d be willing to provide your Digital Ocean API key & Mail gun API key to have my little plugin create a droplet and install Discourse on it and then have an SSH key that it uses to perform upgrades and such.
I think the only production I’ll be adding is that if someone steals the database, they won’t have those keys. Of course if they hack the server then all bets are off.
I guess I may need to find a more lightweight way to encrypt these few fields.
EDIT: Simple Way to Encrypt Data in Rails without Gem looks simple enough and uses ActiveSupport::MessageEncryptor, which seems to be available already.