When imported at top-level, `settings` was a Python module, rather than a Django settings object. Not sure why.
Use SECRET_KEY instead to minimise use of non-standard settings.