Don't publicize the secret token