Add config.secret_token option.