title: Spring Security: Keep only one active token per client
body: <p>We have a REST API secured with OAuth 2 client_credentials.
  Right now every time we authenticate using client-id and client-credentials a new token is generated and the old one stays valid (as long as it has not expired).
  Is there a way to invalidate the old token? We would like to keep a single token per client-id.</p>
  
  <p>Thanks!</p>