@rough-minister-58256: you can't revoke the secret without changing it... and so you don't change it often enough