'secret token' configuration can now be used for initial setup as well.