Security tokens should be encrypted

Resolves issue #30