requesttoken verb should allow token to be written to standard out instead of file (save to external vault). This mode should support piping when paired with silent.
Add support for OAuth refresh tokens
Make OAuth scope configurable.
Save config to a directory rather than at user root.
Support API challenges when in interactive mode.
Command history (bash like)
Completed
Add full MFA support for user/pwd login
Add bootstrap verb that: prompts for tenant admin credentials, logins in as the admin, then set of the OAuthClient needed for CCLI.