remove client_secret declaration
use postfix YYY to comply with doc