use cases: - a user logs out: forcibly disconnect all websockets authorized with the same access token - a user account is suspended: forcibly disconnect all websocket for that user