How should I handle authentication errors when testing the Twala API?

I am currently reviewing the Twala API authentication process and wanted to understand the recommended way to handle failed authentication requests. If an application UUID is valid but the secret has been regenerated, should the client simply treat the resulting 401 response as an expired credential and request a new configuration?

I would also like to know whether there are any recommended practices for rotating credentials without interrupting existing API integrations.