libnss-aad doesn't cache OAuth2 tokens

At present, libnss-aad acquires a new JWT for each Graph API "transaction". This token includes a bearer token and a refresh token, each of which can be cached. Refresh tokens are faster to renew, as well, so using them can speed up the auth process.

Add support for caching tokens (to disk?).