secret_token in defender.yml hidden file