token expiry

What’s the safest way to retire unused service accounts and tokens?

I recently reviewed some old side projects and found more machine credentials than expected: CI access tokens for projects I abandoned years ago, deploy tokens for hosts I…