is one of the reason we fight holy wars for SSO and strict login rules even for Dev or QA environments -- if you can get in during a dev build you can get stuff in there that carries through.

maybe QA will find it... but they're testing X number of JIRA tickets based on Y epics and if it's not on the list they're not looking...