#jamietannaAs I want to have those services refreshing the refresh_token freely, with no interaction from me, I've got a few choices - allow special clients to retrieve a refresh_token without my interaction (could be dangerous, especially as anyone can fake a client_id