add support for revoking user credentials