This should probably be restricted to the owner (logged in through SSO rather than with a password). Add an option in the settings to delete the retro. If confirmed, the retro should be irrevocably deleted.