In other words:
What is the best way to achieve step 4?
sudo launchctl bootout user/$(id -u <username>)
Replace <username> with the target user's user name.
<username>