Also make sure you invalidate that join token 😉