Better handlind of secret token in configuration