- Make KB_AUTH_TOKEN private and handle template replacement.