[signon-plugin-oauth2] Eagerly refresh soon-to-expire tokens