Add OTP last token plugin
    
    This plugin prevents the deletion or deactivation of the last
    valid token for a user. This prevents the user from migrating
    back to single factor authentication once OTP has been enabled.
    
    Thanks to Mark Reynolds for helping me with this patch.
    
    Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>