--- a/mod_http_oauth2/mod_http_oauth2.lua	Wed May 10 19:49:40 2023 +0200
+++ b/mod_http_oauth2/mod_http_oauth2.lua	Thu May 11 15:10:44 2023 +0200
@@ -205,6 +205,7 @@
 	else
 		-- Grant exists, reuse existing refresh token
 		refresh_token = refresh_token_info.token;
+		refresh_token_info.token = nil; -- Prevent persistence of *secret* token
 
 		refresh_token_info.grant = nil; -- Prevent reference loop
 	end