rename SecretHolder to AuthSecretProvider