Description

Sometimes clients don't follow best practices to fresh their access token only when they are about to expire.
This creates a higher load on Keycloak than necessary.

Discussion

#14040 (comment)

Motivation

Administrators should have a simple way to detect this to investigate their clients.

Details

This can be done by storing additional information in events and providing an event listener which logs warnings if such a situation arises.