Secrets

A client secret is shown once, at creation. If you suspect it has been exposed, register a replacement app and delete the old one. Tokens already issued stay valid until they expire.