Do not pass sensitive information using configuration files
The client secret is currently expected to be passed in as a value through the application's configuration file. I suggest that we should instead follow established patterns used in other OSDU services to pass around sensitive information to the running application.