Create a dedicated token object that can be used as part of the per deployment encryption

Created by: chayim

This handles the encryption and decryption of secrets, while at the same time supporting #12409 (closed) goals of per deployment keys.