A CRM endpoint with no secret to rotate

The read only CRM endpoint used to prove itself to the directory with a client secret, a value held in the host’s configuration with an expiry two years out. Nothing in that arrangement reminds anyone before the date, and once it passes the failure looks like a...