When logging in with --client-id and --client-secret, credentials are now automatically persisted to enable automatic token refresh after expiration. Client secret is securely stored in system Keychain, config file only contains a reference.
