Client credentials for GCN are world readable
Client credentials for GCN are world readable and have been for a couple years. @leo-singer suggests adding a check on permissions, and if they are too broad throwing an error. He also suggests rotating credentials