From within the WebApp a user can go to their Account Settings --> Security tab and require re-authentication for an application by clicking "Forget App" for a specific app login or "Forget All". We believe there is value it making this available via the API so that this could be triggered by an Enterprise Application. This comes up most frequently around compromised accounts but would also be valuable when a device with the Box Desktop apps installed goes out for repair.