Is there any way to automatically remove API tokens that are scoped to a cluster that has been deleted? I was looking at the tokens for my user account and was surprised to see the old ones still hanging around.