Find a way to supply client ID and secret to apps

Most apps use `secret.decrypt` to retrieve client IDs and secrets.
We could have a per-user registry where users can register their own client IDs and secrets for given hashes so that they are returned to apps requesting them.