doc/threat.html: contacts learn about revocations