add client_secret_expires_at attribute to client for use during registration

see: http://openid.net/specs/openid-connect-registration-1_0.html#RegistrationResponse