withaccess plugin: revoke permissions