[Contribution] Internal logging of Entra ID refresh tokens

[korniko98]

Summary (give a brief description of the issue)

On Friday 4/18/25, Microsoft identified that it was internally logging a subset of short-lived user refresh tokens for a small percentage of users, whereas our standard logging process is to only log metadata about such tokens

References (provide links to blogposts, etc.)

https://www.bleepingcomputer.com/news/microsoft/microsoft-entra-account-lockouts-caused-by-user-token-logging-mishap/