Gate both kiosks behind a device token, and make an unreachable setting a test failure

plugins/printedparts/plugin.py

@@ -162,7 +162,11 @@ class PrintedpartsPlugin(BasePlugin):
             {
                 'key': 'printedparts_kiosk_token',
                 'value': '',
-                'valuetype': 'secret',
+                # string, not 'secret': the column documents string/boolean/
+                # integer/json only. Masking is keyed on the NAME containing
+                # 'token' (settings.py::_is_secret), so this is still hidden in
+                # the API and the audit log.
+                'valuetype': 'string',
                 'category': 'printedparts',
                 'description': 'Device token the kiosk sends as X-Kiosk-Token. '
                                'Generate one, then open the kiosk once as '