Does ZITADEL support session rollback or forced session invalidation?

Hi ZITADEL team

I have a question regarding session management:

Does ZITADEL support any kind of session rollback or forced session invalidation?
For example, if a user performs a critical action (like device trust removal or password change), can we programmatically invalidate all active sessions and tokens — or "rollback" the current session?

I’d appreciate any guidance or best practices you recommend for handling this kind of scenario.

Thanks in advance!