Make revoked keys explicit