I don't think it is necessary since we don't get refresh token separately. Bad refresh token will have related access token. We can track down the id for access token in the log entries.