Do we need to make this virtual?

Just wondering what the pattern should look like if I want to implement a self-renewing credential.  Overriding the getter seems like one potential pattern. Or, do we expect users to recreate all their clients after access token expiration (every 15 mins?)