[google-auth-library-java] ServiceAccountCredentials with SSJ flow will get error when invoking refreshAccessToken()

[zhumin8]

refreshAccessToke() posts request to OAuth2 token server (see code).
This code path is not exercised for TPC flow via getRequestMetadata(), but it is an public method and is possible to accidentally get triggered by customer's code.

One invocation within this library (that we are patching in googleapis/google-auth-library-java#1528 ) is here