Hi Yeoman,
Firstly, I think you'd better not upload .pdb file to Server.
Secondly, you could use Customer Error, let the clients not display the detailed error information.
Like below:
<configuration><system.web><customErrors defaultRedirect="GenericError.htm" mode="RemoteOnly"><error statusCode="500" redirect="InternalError.htm"/></customErrors></system.web></configuration>
Please see: https://msdn.microsoft.com/en-gb/library/h0hfz6fc(v=vs.100).aspx
Best Regards,
Candice Zhou