In bug 834410 a developer can use a production key to simulate in-app payments. This bug is to introduce a new page in devhub where a developer can generate a key strictly for doing simulations (the key cannot be used for real payments). This optimizes bug 834410 in the following ways: - The developer doesn't have to store a production key on their dev server and thus enhances security - The developer isn't *required* to submit an app or enter bank account details on the devhub in order to begin testing their in-app payment implementation - The developer is not tempted to handle simulations on their production server because the key would be different

To clarify, this bug implies disallowing payment simulations from a production key. This would somewhat mitigate key theft. If someone steals a key that can do simulations then that person can get free stuff if the app server permits it.

The solitude changes needed for this are minimal; they're tracked in bug 837169

pull request: https://github.com/mozilla/zamboni/pull/593 r?

Merged in and live on dev: https://github.com/mozilla/zamboni/commit/3e9334aaca6e5cb27ae88c6f5314ebb2c33db6cc This requires the in-app-sandbox waffle switch to be True