feat: secret rotation (#909)