disabled appsecret_proof