Rotate kubeconfig user token

One of my users posted a kubeconfig for a CI service account on an internal system where some users who shouldn’t have access to that account could see it. How do I change the kubeconfig token for a user? I don’t see an easy way to do this via the UI or API.

  • Auth: Active Directory (The user I want to change the token for is an AD user)
  • Rancher Version: 2.1.6
  • Kubernetes Version: A mix of clusters on 1.11.3 and 1.11.6