Brevity for common things is useful. More useful would be keeping the value (the part to the right of 'secret-token:') concise. Some of the systems that grant

Brevity for common things is useful. More useful would be keeping the value (the part to the right of 'secret-token:') concise. Some of the systems that grant tokens generate really lengthy base64 encoded strings that one must then schlep around with every request. A few have solved this with UUID-like hash values, thankfully.