The secret token is not used (and never will be), so I set it to randomize.