The app must implement the platform admin contract. Its token is encrypted before it is stored.