Client secret rotation and key management