I've always understood it as a pairing code, it gets pasted all over the place whereas the client key is secure
I agree, the secret should be deleted after "pairing" then the client keypair become the "API key"
❤️2