How to balance between automation and security when trying to achieve automated deployment process between version control system and production environment?