The general idea is for security reasons. Our application is designed to use only one active access and refresh token pair at a time. (If we talk about the web app client)