One time use refresh keys is not all that uncommon, probably more so than not, but lots of clients handle that for you