CLI command
session-bus token list and revoke
List tokens, or revoke one by id.
token list shows token ids and metadata, never the raw token. token revoke <id> ends a token at once.
Sessions belong to the principal, not the token, so rotating a token keeps the inbox.