Backport #29205 (including #29172) Use a clearly defined "signing secret" for token signing.
Named
db.DefaultContext