If the securityContext is null in OidcAccount#tryRefresh, we should return false after the log#debug line to prevent securityContext#refreshToken from being called with a null value.