don't regenerate secret on auth edit