pub(crate) static SECRETS_LOCATION: LazyLock<PathBuf>
Client secrets and cached OAuth tokens, kept out of CONFIG_LOCATION so they never show up via config show-profile or similar.
CONFIG_LOCATION
config show-profile