Port AuthProperties.AllowRefresh from Katana.
Use out var syntax.