Request for a Good Practice for webdev doc.

[aprekates <aprekates@posteo.net>]

Experimenting with wsgi and python webapp dev
i came upon issues and roads to choose mainly
regarding to installation , deployment and security
related issues.

sudo pip install ..   or  pip install

is virtualenv secure or is just redicect trickery and
not a real chroot enviroment ?

Should i make another user for developement ?

I think by a little search to the net around similar questions thats
a doc from the community , endorsing some good practices for
developers could be of help.

I've read 
https://wiki.debian.org/DontBreakDebian#Using_chroot.2C_containers.2C_and_virtual_machines
but i thinks there are more questions.

Thanks.