code: func (s *Server) GetSecret(ctx context.Context, request *api.GetSecretRequest) (*api.GetSecretResponse, error) {
  	if request.SecretID == "" {
  		return nil, status.Errorf(codes.InvalidArgument, "secret ID must be provided")
  	}
  
  	var secret *api.Secret
  	s.store.View(func(tx store.ReadTx) {
  		secret = store.GetSecret(tx, request.SecretID)
  	})
  
  	if secret == nil {
  		return nil, status.Errorf(codes.NotFound, "secret %s not found", request.SecretID)
  	}
  
  	secret.Spec.Data = nil // clean the actual secret data so it's never returned
  	return &api.GetSecretResponse{Secret: secret}, nil
  }
docs: // GetSecret returns a `GetSecretResponse` with a `Secret` with the same
  // id as `GetSecretRequest.SecretID`
  // - Returns `NotFound` if the Secret with the given id is not found.
  // - Returns `InvalidArgument` if the `GetSecretRequest.SecretID` is empty.
  // - Returns an error if getting fails.