pub fn refresh_token(account: &str) -> Result<Option<String>, SecretError>
The refresh token for an account — there is one only when its token came from signing in, not from pasting.