Adapts OtvSdkClient, the auth authority, to the AuthTokenSource contract.
Returns a currently valid access token, or null when none can be provided.