I wonder if there's a way to tell based on the Canvas Data tables what is the last time a user changed their password. We are trying to improve security of the local admin accounts and are planning to require password changes on an annual basis (or similar), but in order to do so we need to be able to tell when was the last time a user changed it. Or, if there's an API-based way of figuring this out, I'd be happy to know too. Here are the few things I was able to figure out: 
    - I could not find a password field in the CD1 or CD2 data tables myself when I looked at it; I suspect it's not being exposed
    - Login records (in the pseudonyms table) have an  'updated_at' field but it's not clear when these records actually get updated (seems to be more frequent than when changing password;  could somebody clarify this?)

Thanks in advance