I was think that too, but I think I actually trust auth.js with that over profileManager since it is service specific (in theory refreshing is handled the same way for all, but this is not likely the case in practice). Also, since we only have it for one service right now, it feels a bit too early to make it generic.