How is the «Add Secret Key to URLs» backend option implemented and used?

See also: