Revocation shouldn't be nearly as strict as granting.