--device when a browser redirect is not practical, such as on a remote host or in a container. The device-code flow prints a code and asks you to enter it in a browser on another machine.
A completed login is saved as a context: a named pairing of login server and identity, with its tokens in your operating system’s credential store. Logging in again as the same identity updates that context in place. Run
entire auth contexts to see them all.