Genesys_cloud_oauth_client secret in state file

Setting up a new OAuth client via the Genesys Cloud Terraform provider and noticed the client_secret ends up in plaintext in the .terraform.tfstate file.

resource "genesys_cloud_oauth_client" "main" {
 name = "Test Client"
 client_secret = "super_secret_value"
}

Tried marking it as sensitive but it still writes to the state. How do I keep the secret out of the file?