public boolean loginRefreshReloginAllowedBeforeLogout() {
        return loginRefreshReloginAllowedBeforeLogout;
    }
If the LoginModule and SaslClient implementations support multiple
simultaneous login contexts on a single Subject at the same time. If true,
then upon refresh, logout will only be invoked on the original LoginContext
after a new one successfully logs in. This can be helpful if the original
credential still has some lifetime left when an attempt to refresh the
credential fails; the client will still be able to create new connections as
long as the original credential remains valid. Otherwise, if logout is
immediately invoked prior to relogin, a relogin failure leaves the client
without the ability to connect until relogin does in fact succeed.

@return true if relogin is allowed prior to discarding an existing
        (presumably unexpired) credential, otherwise false
clients/src/main/java/org/apache/kafka/common/security/oauthbearer/internals/expiring/ExpiringCredentialRefreshConfig.java