I can also confirm that if I update an assistant over API and don't specify the server secret in that request it will straight up be removed from the assistant