This parameter specifies the full path of the command that will be executed after adclient finishes the authorization cache refresh. By default, the value of this parameter is as follows: /usr/share/centrifydc/etc/hooks/dz_refresh

The dz_refresh script will check for and remove any expired files in the /var/centrifydc/dz.ovr.d directory. Files in that directory have filenames in the format of yymmddHHMMSS-*.ovr, where the yymmddHHMMSS is the expiration date and time.

You can configure how often the authorization cache refreshes with the parameter.