Logicboxes have now added the option so that a reseller can enter the domain secret (replacement) from within the reseller control panel so that you do not need to login as a customer to do it.

They have also changed the Cancel API call so that if the status is waiting for Domain Secret, the call will cancel the transfer.