The `password` in status update notification is always the Master Shared Secret

I had set a App-Specific Shared Secret, but the data returns in status update notification is always the Master Shared Secret.