Make it obvious that the secret token should be replaced