The problem is you need some repository to store this information and it&#x27;s incredibly helpful to store the configuration along with the code.<p>If someone has access to a shared secret and then shouldn&#x27;t you should assume the secret is now compromised and rotate it.  Rotating the keys doesn&#x27;t solve this problem.