let's have one callback per grant or revoke

not one per granted or revoked gate