8 requests, same refresh token, released together, reuse-grace = 5s
  HTTP 200: 1
  HTTP 401: 7
family afterwards:
  hash 07e179bf  status USED
  hash f2fd3302  status ACTIVE
6 seconds later, replaying the spent token again:
  HTTP 401, family now:
  hash 07e179bf  status REVOKED
  hash f2fd3302  status REVOKED