In obfuscate: use env variable AUDOSCORE_SECURITY_TOKEN if available.

This allows us to verify the outcome of replacement tests.
Add appropriate test for variable obfuscation.