Ok, so it should rather be generated during proposal apply and provided as node[:nova][:quantum][:metadata_proxy_shared_secret]? Or rather the quantum barclamp should provide it.