Changed token updates to reset-only checkbox

* This will be needed for using HMAC values (db token + config secret) as the "final" secrets

Change-Id: I2f82104a74a003f8b4d6e878f3a66d93e9fbed3c
Merge "Changed token updates to reset-only checkbox"