don't think u can use a redirect rule with your scenario cause it would create a redirect loop eg secretregister redirects to user/register which redirects to pagenotfound
But there are contributed drupal modules that you can use to easily change the default drupal paths eg Rename Admin Paths
also from security perspective and to avoid spambots, captcha module would be helpfull at least for user registration page