As a user, I should have permission to edit hosts and whatever permission(if any) required to invalidate users JWT.
I should be able to navigate to Administer --> Users and verify that we have new action added for each user to invalidate JWT.
We should be able to do the same for API and CLI.