It is not revoking token access from users and even allowing revocation of admin when a single admin account is present.