Hash oauth secret token in the database, This will cause oauth secrets
to be visible only right after creating the application. this feature
enabled behind the feature flag `hash_oauth_secrets`

Changelog: changed