@kyisaiah47@mastodon.social My recommendation is, if the service is exposed to the Internet (Dev, Prod, Test, QA) then lock it down. Ideally Dev is not exposed to the internet. Practically you want to test the system as it would be in prod since functionality could be different depending on the level of access for the process. Functionality root might work fine in test, but as a less privileged user it may not work as intended in prod.