When the pull-secret is stored in secure storage, it is difficult to change this to another one. This can happen when the pull-secret is revoked or has to be changed. However when the pull-secret API is used to store a copy&pasted pull-secret, it is not possible to use crc config to reset or unset it. Only crc cleanup allows for the removal, but this command has too many side-effects.