I remember another user mentioning that box.com API limits are quite reserved so for rclone purposes it might not be fit for use?
Edit: Looks like rclone somehow does not count towards Box's API limits. See here: Box.com monthly API limits - #13 by Traducciones_Malakit