token expiration

What’s the safest way to retire unused service accounts and tokens?

I recently reviewed some old side projects and found more abandoned machine credentials than expected: CI personal access tokens, deploy tokens for hosts I no longer use, and…