The security app or token removes it. This is the only way to do so.