pub fn set() -> SourceSetExpand description
The sources --token-secret accepts, in both the places that must agree:
the registry that validates argv, and the read that follows.
No stream sources. A token is one short string a caller already keeps
somewhere, and stdin in particular would collide with --params @-.