default config cis_tokens for tipsy