We should add a convenience method that allows for invalidating an OAuth2Token.
For example, to invalidate an access token, one would do the following:
OAuth2Authorization existingAuthorization = ...
OAuth2Authorization updatedAuthorization =
OAuth2Authorization.from(existingAuthorization)
.invalidate(existingAuthorization.getAccessToken().getToken())
.build();
this.authorizationService.save(updatedAuthorization);