Travis needs to deploy master merges to staging first. The process to actually deploy from staging to production needs to be user-controlled.