Supports maintenance of the user's OAuth2 refresh tokens on disk. Conceptually below the rest of the signin component and not allowed to depend on any other directories under //components/signin.