I think this should be stored in a separate file, similar to the local secret token initialiser.