Moving secret token out to config entry