Yes, they can just clone and directly run the app with their own set of secrets if better-env is set up.