If you’re not willing to share business-critical info with the world, don’t release a token.

Simple as that. 😄