Also, should we notify the other platform somehow? Doesn't the user expect whatever oauth permissions to also be revoked?