Encrypts a signed refresh token to the ambient realm.
the signed refresh token
Optional
the realm's key set, where the caller already has it
the algorithm pair to use instead of the configured one
the compact JWE
an Error marked STS-OAUTH-0240 when the token cannot be sealed
Encrypts a signed refresh token to the ambient realm.