Client secret rotation