Allow 256 byte secrets (+/- AppMessage limitation)

No longer write token names to logs.
Delete secrets immediately on token deletion.