track revoke history and don't delegate if there is revoke within timeout