client secrets are fun