Security configuration for proxy token issuance.
HMAC secret used to sign proxy tokens.
Token time-to-live in milliseconds (keep short to limit replay window).