static File googleClientSecretFileForDomain(S domain) {
  ret firstThat(listFiles(javaxSecretDir(assertSimpleDomainName(domain), "")),
    f -> startsWith(fileName(f), "client_secret") && endsWith(fileName(f), ".json2));
}