The dependent destroy from a host to token will already do that - tokens get removed when the host does.