I'll make the comment more specific. (Refresh may only be an OAuth 2 thing.)