Address Jeff's rewording points

- add tooltip on the success/warning icon in manage page

core/src/main/resources/jenkins/security/ApiTokenProperty/help-tokenStore.html

@@ -6,7 +6,11 @@
     Some good practices for keeping your API tokens secure are:
     <ul>
         <li>Use a different token for each application so that if an application is compromised you can revoke its token individually.</li>
-        <li>Regenerate the tokens every 6 months (depending on your context). We put an indicator concerning the age of the token.</li>
+        <li>Regenerate the tokens every 6 months (depending on your context). We display an indicator concerning the age of the token.</li>
         <li>Protect it like your password, as it allows other people to access Jenkins as you.</li>
     </ul>
+    <div class="warning">
+        The creation date of legacy tokens which have never been used are reset every time Jenkins is restarted,
+        which means that the date may be inaccurate.
+    </div>
 </div>

core/src/main/resources/jenkins/security/apitoken/LegacyApiTokenAdministrativeMonitor/manage.jelly

@@ -105,20 +105,20 @@ THE SOFTWARE.
                                         <td>
                                             <j:choose>
                                                 <j:when test="${hasFreshToken}">
-                                                    <l:icon class="icon-accept icon-sm" alt="${%Fresh token}"/>
+                                                    <l:icon class="icon-accept icon-sm" alt="${%Fresh token}" tooltip="${%HasFreshToken_ok_tooltip}"/>
                                                 </j:when>
                                                 <j:otherwise>
-                                                    <l:icon class="icon-warning icon-sm" alt="${%No fresh token}"/>
+                                                    <l:icon class="icon-warning icon-sm" alt="${%No fresh token}" tooltip="${%HasFreshToken_warning_tooltip}"/>
                                                 </j:otherwise>
                                             </j:choose>
                                         </td>
                                         <td>
                                             <j:choose>
                                                 <j:when test="${hasMoreRecentlyUsedToken}">
-                                                    <l:icon class="icon-accept icon-sm" alt="${%Recently used token}"/>
+                                                    <l:icon class="icon-accept icon-sm" alt="${%Recently used token}" tooltip="${%HasMoreRecentlyUsedToken_ok_tooltip}"/>
                                                 </j:when>
                                                 <j:otherwise>
-                                                    <l:icon class="icon-warning icon-sm" alt="${%No recently used token}"/>
+                                                    <l:icon class="icon-warning icon-sm" alt="${%No recently used token}" tooltip="${%HasMoreRecentlyUsedToken_warning_tooltip}"/>
                                                 </j:otherwise>
                                             </j:choose>
                                         </td>

core/src/main/resources/jenkins/security/apitoken/LegacyApiTokenAdministrativeMonitor/manage.properties

 title=Manage Legacy API Token usage
 contextMessage=The following users have a legacy API token. \
   Because legacy tokens are stored in a recoverable format, we recommend migrating to the new API token system. \
-  Additionally, in previous version of Jenkins, API tokens were automatically created for every new user. \
+  Additionally, in previous versions of Jenkins, API tokens were automatically created for every new user. \
   Often, users did not use the token, resulting in a larger attack surface than necessary. \
   Automatic token generation must now be enabled explicitly.
 recommendationMessage=For such reasons, we recommend to: \
@@ -16,18 +16,22 @@ NumDaysSinceCreation=Days since creation
 NumOfUse=# of use
 NumDaysSinceLastUse=Days since last use
 HasFreshToken=Fresh token?
-HasFreshToken_tooltip=A fresh token is one that was created using the new system\n\
-  after the most recent use of the user's legacy token. \n\n\
-  Note: the creation date of legacy tokens which have never been used are reset every time Jenkins is restarted, \n\
+HasFreshToken_tooltip=A fresh token is one that was created using the new system \
+  after the most recent use of the user''s legacy token. \n\
+  Note: the creation date of legacy tokens which have never been used are reset every time Jenkins is restarted, \
   which means that the date may be inaccurate.
+HasFreshToken_ok_tooltip=A fresh token exist for that user
+HasFreshToken_warning_tooltip=No fresh token exist for that user
 HasMoreRecentlyUsedToken=Recent token?
-HasMoreRecentlyUsedToken_tooltip=A recently used token is one that was created using the new system \n\
-  and used more recently than the user's legacy token. \n\n\
-  Note: the creation date of legacy tokens which have never been used are reset every time Jenkins is restarted, \n\
+HasMoreRecentlyUsedToken_tooltip=A recently used token is one that was created using the new system \
+  and used more recently than the user''s legacy token. \n\
+  Note: the creation date of legacy tokens which have never been used are reset every time Jenkins is restarted, \
   which means that the date may be inaccurate.
+HasMoreRecentlyUsedToken_ok_tooltip=A recent token exist for that user
+HasMoreRecentlyUsedToken_warning_tooltip=No recent token exist for that user
 NoImpactedUser=There are no users with a legacy token
 NoCreationDate=There is no creation date for that token
 NoLastUse=There is no last use date for that token
 RevokeAllSelected=Revoke the selected token(s)
 RevokeAllSelected_confirm=Are you sure about revoking all %num% selected token(s)
-RevokeAllSelected_nothing=No token is selected, please select at least one to revoke
\ No newline at end of file
+RevokeAllSelected_nothing=No token is selected, please select at least one to revoke

core/src/main/resources/jenkins/security/apitoken/LegacyApiTokenAdministrativeMonitor/message.properties

-warningMessage=There are users that are still using a legacy API token. \
+warningMessage=There are users who are still using a legacy API token. \
   That system is not as secure as the new one because it stores the token in a recoverable manner on the disk. <br />\
   See <a href="{0}/{1}/manage">list of impacted users</a>.