Work from the beginning directly on the server where the website would go live, and hide/restrict its access until it's ready.
