fix(settings): verify the repoint before reaping a rotated secret (#8262)

fix(settings): verify the repoint before reaping a rotated secret (#8262) #19648