auth: Stop mentioning 'global' secrets in API.

appengine/swarming/server/bot_code.py

 # Copyright 2014 The LUCI Authors. All rights reserved.
 # Use of this source code is governed under the Apache License, Version 2.0
 # that can be found in the LICENSE file.
 
 """Swarming bot code. Includes bootstrap and swarming_bot.zip.
 
 It includes everything that is AppEngine specific. The non-GAE code is in
 bot_archive.py.
 """
 
@@ skipping 229 matching lines @@
   memcache.set('code-' + version, content, namespace='bot_code')
   logging.info('generated bot code %s; %d bytes', version, len(content))
   return content
 
 
 ### Bootstrap token.
 
 
 class BootstrapToken(auth.TokenKind):
   expiration_sec = 3600
-  secret_key = auth.SecretKey('bot_bootstrap_token', scope='local')
+  secret_key = auth.SecretKey('bot_bootstrap_token')
   version = 1
 
 
 def generate_bootstrap_token():
   """Returns a token that authenticates calls to bot bootstrap endpoints.
 
   The authenticated bootstrap workflow looks like this:
     1. An admin visit Swarming server root page and copy-pastes URL to
        bootstrap.py that has a '?tok=...' parameter with the bootstrap token,
        generated by this function.
@@ skipping 45 matching lines @@
 
 ## Config validators
 
 
 @config.validation.self_rule('regex:scripts/.+\\.py')
 def _validate_scripts(content, ctx):
   try:
     ast.parse(content)
   except (SyntaxError, TypeError) as e:
     ctx.error('invalid %s: %s' % (ctx.path, e))