diff --git a/.gitignore b/.gitignore
index 9d4b336..bf14506 100644
--- a/.gitignore
+++ b/.gitignore
@@ -56,3 +56,8 @@ venv/
 tmp/
 temp/
 *.tmp
+
+# Test/debug scripts with secrets
+scripts/*-test*.py
+scripts/test-*.py
+**/test-oidc-provider.py
diff --git a/secrets/clients/test-temp.sops.yaml b/secrets/clients/test-temp.sops.yaml
new file mode 100644
index 0000000..e69de29
diff --git a/secrets/clients/test.sops.yaml b/secrets/clients/test.sops.yaml
index 388e3ab..a18ddcd 100644
--- a/secrets/clients/test.sops.yaml
+++ b/secrets/clients/test.sops.yaml
@@ -9,7 +9,7 @@ authentik_db_password: ENC[AES256_GCM,data:HsyTlbM8pewD6ZUndnPQzBzlNECdlOqEWt6Ag
 authentik_secret_key: ENC[AES256_GCM,data:cl1U+PGeaQNu2OW3t4QzfWIyMtvkQdYk8Adb7EmLrSHceeHxfXgKwgxvp2Fn7C8RDpuCsztkxEz1D2vePO2xSpIo3Q==,iv:trlB7PJd4os21wOK+CyfymE+oopdksydS+z3VHBT1wU=,tag:BwQ2FygYOaX22YKOTgY0mw==,type:str]
 #ENC[AES256_GCM,data:3AF1/xf9DULcTEhTfxSr9ls8U0cr0ToG88783V10OAmsOclhq5h3ncFoLM3GZXY=,iv:Ji7447QFwRn0MKoXakAoe7ZDeJrT0fYAVHwYBWr/hjQ=,tag:+CQyj9pZxzKualOV/hlrkg==,type:comment]
 authentik_bootstrap_password: ENC[AES256_GCM,data:K0nR2CCA+mZLwt1eKY3NU0iB3aXRbze+aX089cmAfTXunBsRZgXWirC3Pg==,iv:Ki4G/iMoL8rqIR/E5YWWNa60TEFEJlpmjfSO17ccjms=,tag:c91a6Dlu2cDeAbtH0VMynw==,type:str]
-authentik_bootstrap_token: ENC[AES256_GCM,data:/4lmrHtopWceNuXRf5MADsh7QHxw/8p8Kd4hSsQLSimHBQpfio1hMycfMX/Zeq4Y/0I2RW/Zd+bt,iv:DDE3XbnqiGIeREGdjV3aRm/t0TzGwJuJSHeR0fO36QI=,tag:Ir6VTQ3eOCuRymxyE/cf3Q==,type:str]
+authentik_bootstrap_token: ENC[AES256_GCM,data:wzToXlHEEo4hqbTpYaj8VcjIzl9JIBYelb6csfSXB3gsecyOOriUsvpBua2By0l6c2DMpUVipRR1fEo6CZLc,iv:3U7eseITVM6LTzlc7tEPV44qYTdiLbKpOcDR+S0y9ME=,tag:UFxakIe4ZhgJy8K8caF16A==,type:str]
 authentik_bootstrap_email: ENC[AES256_GCM,data:3H2b7nl+i5AnXVSWCWkpzfCe7lk8ow==,iv:KlpRA6aP1/sSG5PSs8Q3aRshn1ZgHQwW4AtTYwCgd+0=,tag:SpD7K4Xme/QUTxLEL7Xi3A==,type:str]
 #ENC[AES256_GCM,data:ZXsSQkRtXNF5DMUPAAaLBWkAgh/hJMUX,iv:+r+WtRYebnFEkw3qmIkXRPUUYSep53qzgy2FvpGhSfw=,tag:S+w04XduCSLRntLJiEDFUQ==,type:comment]
 nextcloud_domain: ENC[AES256_GCM,data:i0hWB89Lxjn+s9NOrFsYZr/zsQ2/BzZKIk0=,iv:AU1LLm04+4Ekjm9Q3Gqe3MpqdIdGAGK7EaClJMO2bz0=,tag:8AEN6jdruVUzFEZe0sVBrg==,type:str]
@@ -32,7 +32,7 @@ sops:
             NnN0SE4rZ0lFWUlaNjBIc293UzlxakkKYOxxyTtwEEo3j6iMGeHyArYSquT+2ieB
             cPA1QayU4OBucKo34WuZTh41TxIg2hr1GG3Ews5QDEiTJlAQuAzldw==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-01-08T09:40:07Z"
-    mac: ENC[AES256_GCM,data:E4FjdHpimloNy3THoUNNlAstaZlb6287PUaV1HTGTXEoFz+6JYRkfR2V3KpTcinHhs8siQoiLMWCL+pl0wEDrs64TgIb730yy12qMmopYJ9LsRWtXLE5x5DN346bggGhUcdAI2Uvb+32UypvY5szOh9hPQRhTMn3uz80er7Ye8Y=,iv:H/t8M+CDW7w3uoG0PM/QYmzDSA7Xu0Mg6K1DnBXGJJ8=,tag:hWuClsYVH+FWcTqZou+fsQ==,type:str]
+    lastmodified: "2026-01-09T07:31:15Z"
+    mac: ENC[AES256_GCM,data:MSnPPzLLCZIIK/RmhlpMaNGEeZCHVzY2PK4A4PhC4nXuw9AwGjYDrHn3FQ9aJywi7NlXxLqFWo9nSnFswNlIUpea/3MTsa5LNimX6a22c9YRut+yImwrBU3abcgzxVJsHk7DUGIA1TY/AElC5ZLNROrw/X+sVf5L2pq7P2/oous=,iv:cOxocMqLgzzzT89RdfJdfvOfZ3Ph4tWbE6bV21WZgZI=,tag:zrthLaXOrdx3IU4I5G+zBQ==,type:str]
     unencrypted_suffix: _unencrypted
     version: 3.11.0