good point -- since the revocation is not recorded in the /etc/ contents.