The OauthPKCE .NET example, which creates an access token and a refresh token using PKCE, saves both tokens to settings. It looks like creating the DropboxClient, the access token is not needed. Is it sufficient when using short-lived tokens with the .NET SDK to only save the refresh token?