mod_http_oauth2: Calculate client secret expiry in registration response Not actually the client_secret that expires, but the client_id JWT. Returning '0' indicating no expiry was incorrect unless JWT expiry is turned off, which we check for now.

Removes invalid characters from roster entries.

```bash
sudo prosodyctl mod_clean_roster
```