Supporting Globus refresh token auth; adding private fields convention to hide sensitive data from normal queries