title: Server side removal of Oauth token
body: <p>If a user wants to remove him/herself from our service, we delete all of their data from our database, including Oauth tokens.  The Oauth tokens we have are secure and persistent.  As part of best practice we would like to totally invalidate the tokens as if they want to their Google accounts page and removed it there.  Reading the Oauth documentation it was not clear to me if this is possible because all of the examples pertained to single-session or non-secure cases (and excuse my lack of "What did you try?"-ism but I'm trying to get a quick plan together on how to do this).</p>
  
  <p>So</p>
  
  <p>1)  is this possible?  Preferably on 1.0?</p>
  
  <p>2)  how to do this?</p>