diff --git a/jupyterhub/jupyterhub.yaml b/jupyterhub/jupyterhub.yaml
index ca9f16c..bc81136 100644
--- a/jupyterhub/jupyterhub.yaml
+++ b/jupyterhub/jupyterhub.yaml
@@ -21,7 +21,7 @@ spec:
               extraEnv:
                 - name: OAUTH_TLS_VERIFY # for getting around self signed certificate issue
                   value: "0"
-                - name: JUPYTERHUB_OAUTH_CLIENT_SECRET
+                - name: OAUTH_CLIENT_SECRET
                   valueFrom:
                     secretKeyRef:
                       name: jupyterhub-oidc
@@ -29,7 +29,6 @@ spec:
               GenericOAuthenticator:
                 oauth_callback_url: https://cnoe.localtest.me:8443/jupyterhub/hub/oauth_callback
                 client_id: jupyterhub
-                client_secret: $(JUPYTERHUB_OAUTH_CLIENT_SECRET)
                 authorize_url: https://cnoe.localtest.me:8443/keycloak/realms/master/protocol/openid-connect/auth
                 token_url: https://cnoe.localtest.me:8443/keycloak/realms/master/protocol/openid-connect/token
                 userdata_url: https://cnoe.localtest.me:8443/keycloak/realms/master/protocol/openid-connect/userinfo
diff --git a/jupyterhub/jupyterhub/manifests/jupyterhub-config.yaml b/jupyterhub/jupyterhub/manifests/jupyterhub-config.yaml
index bd405c2..1a3b330 100644
--- a/jupyterhub/jupyterhub/manifests/jupyterhub-config.yaml
+++ b/jupyterhub/jupyterhub/manifests/jupyterhub-config.yaml
@@ -11,7 +11,7 @@ data:
       "clientId": "jupyterhub",
       "name": "Jupyterhub Client",
       "description": "Used for Jupyterhub SSO",
-      "publicClient": true,
+      "publicClient": false,
       "authorizationServicesEnabled": false,
       "serviceAccountsEnabled": false,
       "implicitFlowEnabled": false,