Fix secret generation for the API client