That sounds good. In our use case at least we have the problem of sessions not being cached. In other words we construct a new Service wrapper each time, so we also lose any cached Sessions we might have had before. So if we do store the refresh token there we need to worry about persisting those sessions in some way.