We want our developers to be able to diagnose production issues in staging. For the sake of this, we are planning to make an exact replica of production into staging. We are thinking however, if we scrub the non-encrypted data, that it could no longer represent issues that may be present in production.
What is the best practice in this situation? Should they have full read access to staging? Should it be scrubbed? How should the staging environment be implemented for customer security but also to allow developers to diagnose production issues?