Following a secure deployment methodology for custom applications, early code testing would run in which type of environment?