Quota limit on the time of authentication

Hi, I have a FreeRadius server running with EAP-TLS. The client can authenticate with the server with the client-side certificate (which is in a Hotspot 2.0 profile). I want to avoid user misuse of certificate/profile stolen - userA copies the client-side certificate/profile and give it to userB, so that userB can authenticate to the server with the same certificate/profile. Is there something that can be configured in FreeRadius to limit the quota of authentication on one user/certificate? For example, only allow 10 times of user authentication to my FreeRadius server everyday? Thank you! Best, Holly