switch service principal over to secret auth
secret credential support in service