Details are provided by @cmodijk [here](https://github.com/Lusitanian/PHPoAuthLib/pull/335)