Lesson learned: First you revoke their credentials, then you tell them they're fired.