Refresh OAuth2 client secrets