Sign out of a provider
Removes the provider’s stored credential from this machine’s keychain. Idempotent: a provider that holds no credential answers 204 too. An environment variable naming a key is never touched — nothing this operation can do removes it — so a provider covered by one goes on reading as authenticated afterwards.
Authorizations
Enforced on every transport, with no exempt operation. A person's request — over the default local unix socket exactly as over a TCP listener — must carry a JWT issued by the configured identity provider, which the host verifies itself against that issuer's key set: signature, issuer, expiry, and the person and organisation it names. Requests without a valid one receive 401 NRY-0011. The socket's file permissions are transport and are not an authorisation.
Path Parameters
The provider's name.
128^[a-z0-9][a-z0-9-]*$Response
The credential is gone.

