Change the way app secret is managed