Backport #29205 (including #29172) Use a clearly defined "signing secret" for token signing.
db.DefaultContext