IAM should highlight how long a client has not been used

[enricovianello]

This introduces the need of track a "last-used" information for a client (last token issued, last userinfo/introspection call, etc.).