Extract secret token to env var