Rename get_token_secret() to get_derived_secret().