Can't pass `force_refresh` through `get_token` to MSAL's `acquire_token_silent_with_error`

[jiasli]

Symptom

Due to the removal of kwargs when calling acquire_token_silent_with_error (#16323 (comment)), it is now impossible to pass force_refresh through get_token to MSAL's acquire_token_silent_with_error.

Impact

• This makes the proposed solution for CAE of using force_refresh=True or exclude=old_at impossible (Revoked ATs are returned after re-login AzureAD/microsoft-authentication-library-for-python#335 (comment)).

• This makes az account get-access-token --force-refresh impossible ([Feature Request] Support --force-refresh in az account get-access-token azure-cli#17578).

[chlowell]

I'm closing this because we don't support passing arguments to MSAL, and this particular scenario is moot because the proposed solution wasn't implemented. More generally, we haven't added a force_refresh argument to get_token because we can't promise a new token. For example, managed identity endpoints typically maintain a token cache but not all endpoints provide a way to bypass that cache.