Service Registry - Multi Registry Install

Question

We are in the process of doing a multi registry Service Registry install. A couple of questions ?,
Installation Best Practice Questions
We have a Development and Production (HA) environment.
Is there any "best practices" around setting this up for these environments ?. ie should there be just one service registry environment ie discovery and publication registry used by both Development and Production instances OR should there be a discovery/publication registry per environment i.e Development has disc/pub registries and prod has disc/pub registries. Does anyone have any thoughts/experience on this, can see pluses and minuses with both of these setups.
SSL Enabling
Secondly, the documenation states that the Discovery and Publication registry should communicate over SSL. In order to register a Trusted Certificate against the Discovery registry we would need to change the server.xml, opmn.xml, mod_oc4j.conf etc to do this........that would enable SSL for the whole Application Server...is this right ?

Answer 1

Thank you for your responses.
1. From what im hearing the way to go is: Discovery Registry (Development)and a clustered Publication registry (Production) using an approval process between the two, and potentially using an Intermediate Registry (when our QA env gets sorted!) .
2. I had a look at the README which talks about Digital Certificates, we actually have trusted certificates from Thwate for both our environments (different from the default), should the process outlined in the readme still be followed ?.
3. In addition have installed standalone registry (for play purposes) and am using LDAP for external accounts integration (as we plan to for the 'proper' installs), is there a way of limiting who in LDAP has access to the registry, i also noticed that one can also create users via the Registry consoles, can this be stopped in anyway other than changing the UI.
4. And finally if we have 2 LDAP's (OID...1 on dev, 1 on prod), what are the implications of this for a disc/pub registry setup as described in point 1 above ?
Sorry for varying/volume of questions all on one thread!
Evan