Investigate non-plaintext token cache

Email from Storage team

> according to the Storage Team’s security experts, it’s best to store the tokens in a secret store rather than exposing them as plaintext. We also had the same conversation with them when we were implementing OAuth authentication, and they advised us to not follow the CLI’s example, as it’s always possible that a malicious agent is running when the user is logged in.