I suggest collecting and displaying information about when each access was last used, ideally per granted permission. (This data could also be used to automatically revoke unused accesses after some time.)
Sure I would like to just add a simply âlast usedâ and sort so last used is on top.
Also, will add a site setting to âauto expireâ keys that have not been used for say 6 months, default on. Which is a super welcome security change.
We only started tracking âlast useâ after this change. This means that the user profile says âLast use: 8 hours agoâ on some keys you may have not used in years.
This will âfix itself upâ over time, no real choice here but to start somewhere.