add invalidate_grant operation