[keycloak-user] Revoking individual refresh tokens