ref: use anoter master secret

deploy/handy.yaml

@@ -54,6 +54,8 @@ spec:
   dataFrom:
     - extract:
         key: /handy-db
+    - extract:
+        key: /handy-master
 ---
 apiVersion: v1
 kind: Service

sources/app/api.ts

@@ -24,7 +24,7 @@ export async function startApi() {
     log('Starting API...');
     const tokenGenerator = await privacyKit.createPersistentTokenGenerator({
         service: 'handy',
-        seed: process.env.SEED || 'handy'
+        seed: process.env.HANDY_MASTER_SECRET!
     });
     const tokenVerifier = await privacyKit.createPersistentTokenVerifier({
         service: 'handy',