Refresh tokens aren’t necessarily long lived, you can force the client to exchange for another refresh token.