What error handling does Bun provide for expired credentials under least‑privilege settings?

Bun's least‑privilege flag enables least‑privilege enforcement for file system and network operations, yet the runtime does not define a unified approach for handling expired authentication tokens or database credentials. While the seccomp‑bpf filter secures process‑level access, it does not automatically refresh service account tokens or rotate database passwords. Application code must rely on external mechanisms for credential renewal, and the behavior of error reporting varies across Bun's native APIs and third‑party packages.

What specific error codes does Bun's fetch API return when a JWT token expires? How do Bun's native SQLite driver and external connection pool treat expired database credentials? Is there any built‑in support in Bun for automatic token refresh or credential rotation?