Add new rule for secrets insufficient token length

[ericwb]

Tokens should be a sufficient length (32 bytes) to avoid vulnerability of brute-force attacks.