Validate `client_secret` parameter against the regex provided by the C-S spec.