Synapse now correctly enforces the valid characters in the `client_secret` parameter used in various endpoints.