Plugin does the following  - 

1. Decrypts the private key
2. Creates the JWT assertion 
3. Request the Access Token from Box auth server 

The output token can be used to make API calls on behalf of the application (no business user credentials are required, its server to server authentication).