Properly require client secrets to be specified