Ok, I've read the feature docs about this attribute. Seems like there's been taking a shortcut by using this public static property to retrieve a secret key. We should probably use a different approach where we reference an authentication filter in the attribute that takes in an ISecretProvider instead of hardcoding the secret.

I believe that was from the initial starting pilot code (though it probably was named differently). The intention was to declare on operation level how the secrets (name + value) should be retrieved. ISecretProvider definitely looks like the way to go. So making this Obsolete might be a good choice.