Token Revalidation Policy changes. Now every application can get a
policy to revalidate its tokens. The tokens are stored in an in-memory
cache, which is cleaned up whenever a cache hit on an expired record is
hit.