Any updates on this?

Also struggling with the OAuth security considerations. Specifically with updating the OAuth Secrets.

Currently using a SP to access Databricks workspace for DevOps purposes through the Databricks CLI.

I have the SP set up to renew it's ClientSecret every 2 months and update in Azure KV. I want to do something similar with Databricks OAuth Client Secret. Now I have it manually created and copy pasted to KeyVault. But I want to periodically update the OAuath Secret due to strict security requirements.

I see some methods on how to renew your own Databricks OAuth Token. But I see no information on renewing the Oauth Secret (programatically). Or on how to prevent storing the Secret as plain text in the .databrickscfg file.