It appends "--" to the rclone authorize command line before client_id, in case that the client_id or client_secret has a prefix of "-" (OneDrive's does), which affects the argument parsing.
Outvi V