Report question

Question: Why should I transmit `client_secret` to obtain an `access_token`?