The one-time keypackage shared by the inviter is stored locally and marked there. Once an invitee uses it and sends a group creation request, it is marked as used. If another person tries to use it afterward, the request will be rejected.