APP client secret value should be masked after creation
after create an App under Apps and Tokens, the Client Secret value should not be viewed except for immediately after creation. Also it should have expiration data and notification prior to expiry date.