syntax for secret token