Cause
The client already has two valid credentials.
What to do
Revoke one before rotating.
application/problem+json
{
"type": "https://masnet.com/developers/errors/secret_limit_reached",
"title": "Credential limit reached",
"status": 409,
"detail": "...",
"code": "secret_limit_reached",
"correlation_id": "..."
}