replace plaintext secret transmission with time-limited hmac-based bearer tokens