Move encrypted tokens to their own path and create a test case