auth: Remove 'secrets' from replication.proto.

appengine/components/components/auth/proto/replication.proto

Index: appengine/components/components/auth/proto/replication.proto
diff --git a/appengine/components/components/auth/proto/replication.proto b/appengine/components/components/auth/proto/replication.proto
index 27b6d5c489be3665f961e9cce4743674a6ba3750..1ff450704d8acebcb9544c12729b957ab193826e 100644
--- a/appengine/components/components/auth/proto/replication.proto
+++ b/appengine/components/components/auth/proto/replication.proto
@@ -6,6 +6,8 @@
 // Used from both Primary side (i.e. auth_service) and Replica side (any service
 // that uses auth component).
 
+syntax = "proto2";
+
 package components.auth.proto.replication;
 
 
@@ -107,19 +109,6 @@ message AuthGroup {
 }
 
 
-// Some secret blob. Corresponds to AuthSecret entity in model.py.
-message AuthSecret {
-  // Name of the secret.
-  required string name = 1;
-  // Last several values of a secret, with current value in front.
-  repeated bytes values = 2;
-  // When secret was modified last time. Microseconds since epoch.
-  required int64 modified_ts = 3;
-  // Who modified the secret last time.
-  required string modified_by = 4;
-}
-
-
 // A named set of whitelisted IP addresses. Corresponds to AuthIPWhitelist
 // entity in model.py.
 message AuthIPWhitelist {
@@ -161,9 +150,9 @@ message AuthIPWhitelistAssignment {
 
 
 // An entire database of auth configuration that is being replicated.
-// Corresponds to AuthGlobalConfig entity in model.py, plus a list of all groups
-// and a list of global secrets.
 message AuthDB {
+  reserved 5; // used to be 'secrets', no longer used
+
   // OAuth2 client_id to use to mint new OAuth2 tokens.
   required string oauth_client_id = 1;
   // OAuth2 client secret. Not so secret really, since it's passed to clients.
@@ -172,8 +161,6 @@ message AuthDB {
   repeated string oauth_additional_client_ids = 3;
   // All groups.
   repeated AuthGroup groups = 4;
-  // Global secrets shared between services.
-  repeated AuthSecret secrets = 5;
   // All IP whitelists.
   repeated AuthIPWhitelist ip_whitelists = 6;
   // Mapping 'account -> IP whitlist to use for that account'.