DigestAuthentication commited : for supporting other algorithms need secret_token : how to change secret_token safely

Researching , .... 
private def getSecretTokenClient: String = {
    var secret_token = "rtrrgnccvhdadjdjohcdbdjafpoffhfgfjgfusu" // default
    //TODO : get from client 
    secret_token
  }