Create a dedicated token object for returning the raw and masked tokens

Created by: chayim

Only when the decrypted token is requested from the object, does the decrypted secret even exist in memory