The secret to use for the token. If not provided, a random default secret will be generated in memory and used.