This will support persisting the types that need it. It would take advantage of the new class design.
Enforce access token expiration
One-time use refresh tokens
Implement new API token management API
Implement access token expiration and refresh token rotation
Container-based module-based integration test
mod-authtoken tenant init not called