Close #7: Move token encryption key to env variable