Hey I have such standart flow: 1. user authenticates through external identity provider 2. kratos handles callback and issue kratos_session for user 3. user perform some requests, everything fine. If I wanna to extend user session I can use /admin/sessions/{id}/extend endpoint. But, what if user was deactivated on external identity provider side? As I understand, before extending session kratos should try to refresh information about user by calling oidc refresh token endpoint. In such case deactivated user couldn't infinitely extend session. What to you think about that? Are there any ways to achieve such behavior?