Hi @jack.broadhurst,
Thanks for posting and sorry for the late reply.
You are also able to achieve this programmatically, using the Management API as you have already mentioned, or the Authentication API. You can check out our Revoke Refresh Tokens documentation that provides all the steps needed.
You can also check out this Knowledge Article about revoking Refresh Tokens for a user within Actions, since it might come handy.
Additionally Refresh Token Rotation can also be implemented for extra safety.
I hope this helps your use case, but others as well.
Thanks,
Remus