dbareactions:

When you find out that the programmers are using the sa username and password for the production connection string