secret token security :fire: