An incident involves one set of dynamically issued database credentials. What is the appropriate Vault lifecycle operation when immediate invalidation is needed?

1. Revoke the associated lease and verify backend revocation succeeds
2. Extend the lease so the investigator can use it later
3. Delete only the application's cached lease timestamp
4. Rename the local password variable