[api] verify you can revoke submit requests to deleted projects
[api] allow to revoke maintenance_incidents no matter what