3 ms·All they have to do is expire their secret key and all the access tokens will be invalidated.by iLoch 11y agoAll they have to do is expire their secret key and all the access tokens will be invalidated.