`POST /users/{id}/session-revocations` — sign this person out everywhere: every session they hold ends at its next request (within 30 seconds). It does not change their password or second factors. Admins only; only the owner may sign the owner out.

curl -X POST "https://example.com/users/string/session-revocations"

{  "ended": 0,  "revoked_at": "string",  "user_id": "string"}