Subusers would be a really great addition yeah. It's kinda weird that even with the token the old password could be used. It would be better to just log out every instance that is still connected to the old PW. That's one of the many reasons I wouldn't give console access to literally anyone even my closest friends don't have access.