List all active grants for this user.
Requires a root-capability session. Non-root sessions surface the
homeserver 403 as the standard request error.
Revoke a specific grant by id.
Requires a root-capability session. Malformed ids throw
InvalidInput.
Account-level grant management for a signed-in user.