OAuth2 client_secret stored in plain text in the database