Support secured token

This enables using secured token (e.g. ${sec.data.thoughtbot.api_token}).