The nomad-acl-token is being logged at the default logging level of info. I think that it makes sense to log other useful info at info level, but secret info like tokens would ideally never be logged, or at best, at debug level only.
In looking at the code, it seems most if not all logging is done at the info level, so other levels of logging aren't very useful as a work-around.

That

The cookbook runs successfully, but the service enters failed state:

$ sudo service consul-template status
Redirecting to /bin/systemctl status  consul-template.service
● consul-template.service - Consul Template Daemon
   Loaded: loaded (/etc/systemd/system/consul-template.service; enabled; vendor preset: disabled)
   Active: activating (auto-restart) (Result: exit-code) since Mon 201