Prevent revoking ca cert