Chooses the token cipher for the config password.
Config password; empty when none is set.
PLAINTEXT_TOKEN_CIPHER for an empty password, otherwise a cipher that seals every record under it.
Chooses the token cipher for the config password.