Secret key from UUID?

[singularity-s0]

Why default to this? This could raise security concerns, especially when the attacker has shell access.

[hasbai]

这只是供开发测试时用的默认配置，部署上线时应用自己的 key 覆盖默认配置