time is invalid. If a new user JWT or new activation token is created after T it can be used. This allows an account owner to revoke a user and renew their access at the same time.</p>
<p>Let&apos;s look at an example. Suppose you created a user JWT with access to the subject &quot;billing&quot;. Later you decide you don&apos;t want that user to have access to &quot;billing&quot;. Revoke the user, say at noon on May 1st 2019, and create a new user JWT without access to &quot;billing&quot;. The user can no l