Added pluggable client secret validator (#574)