User revocation mechanism