Comment by can16358p

There might be some sensitive applications where server might want to immediately revoke credentials server-side though.