I'm an administrator, when I check deactivated user, I see their API token still have activities.
Should I revoke this token?