Confine private IdP exemptions to dev builds