Well my understanding was actually wrong. You’re supposed to know from which environment the token come from and Apple does not give a way for you to know… Source: the answer from a DTS.

Bingo

Interesting solution (#3). Though I’m pretty sure it’s as inefficient as #1, if not more. Anyway, glad to know it’s a possibility anyway.

Don’t edit defaults using PlistBuddy. Use the defaults command.