If they are different for every authorisation, I don't see why we should keep those as global constants in this secret file. IMHO we just just do an authorise call to obtain them in the functional test, and use them afterwards.