Looking at the token healthcheck implementation here: https://github.com/Azure/aad-auth-proxy/blob/42be1cd7b9204e0046367549142d97dc8c545f05/src/handler/handler.go#L160 Seems this is always a no-op, because tokenProvider always exists and the code block under if will never execute