Nomad snapshot agent and nomad token

For the nomad snapshot agent nomad Management token is required. Whats the best way to deliver it to the machine? I am thinking to run nomad snapshot agent on nomad Masters as Systemd Unit. For security Purpose i would imagine different nomad token per cluster.