Integrated Paul K's suggested change to Section 4.1, tweaked implementation
guidance to remember credentials to revoke consent.