To see how user accounts created in System Preferences' Users & Groups automatically get Secure Token when created by an account with Secure Token, please see the video. It will go through the following process:
1. Creating a new user account in the Users & Groups preference pane
2. Verifying using sysadminctl that the new user account has Secure Token