OAuth client_secret_ref is deprecated
OAuth extensions support client_secret_encrypted for direct encrypted storage of the upstream provider’s client secret. The environment-variable reference client_secret_ref is deprecated. See #125.