You can rotate a client secret to generate a new secret for an API client. This invalidates the previous secret, which can then no longer be used to generate access tokens.
The previous client secret is invalidated and can no longer be used to generate an access token. A new client secret is created.