revoke
Revokes an authenticated browser by id, the same action the dashboard's Session view exposes through DELETE /api/v1/auth/principals/{id} -- this is the device-side equivalent. Ungated by capability, like the exports above: the device owner opening this screen is already the highest trust level there is.