Refresh Grant on Valid-User getting invoked

[jsona91]

Hi, we have configured 2 public and 2 protected locations as below

<Location /protected1>
AuthType openid-connect
Require valid-user
OIDCUnAuthAction  auth true 
</Location>

<Location /protected2>
AuthType openid-connect
Require valid-user
OIDCUnAuthAction  401
</Location>

<Location /public1>
OIDCUnAuthAction   pass 
</Location>

<Location /public2>
OIDCUnAuthAction   pass
OIDCPassClaimsAs headers
OIDCPassAccessToken on
Require all granted 
</Location>

when /protected1 endpoint invoked, it perform authentication correctly by contacting to openid provider and pass claims and tokens to next downward system

I have some questions on other 3 Locations.

1. when /protected2 endpoint invoked, it checks user is valid and pass claims and tokens to next downward system. But it also checks access token is expiring and invoke refresh grant automatically if required. How can refresh grant call be avoided as we dont want to refresh the access token in this endpoint as we are expecting only valid-user should be checked ?
2. Both /public1 and /public2 endpoint does not perform any mod_auth operation and passes only mod_auth_openid_session to next downward system. But Access Token is not set in Authorization header. It remains as
   Authorization: Bearer null
3. What will happen if we set OIDCRefreshAccessTokenBeforeExpiry 0

Thanks