Keystone token flush

Setup keystone token flushing.

This isn't done by keystone (!) you have to actually tell it to happen. Note I set it up to happen at a random but reproducible time one a day. Ideally, this would be some distributed cron job, but this works for now. 

This should be back ported to the icehouse release.