[probably shouldn't merge yet] calculate data rather than using the revoked flag

Lets us calculate which serials are revoked based on references.

This means we can delete entitlements/consumer identity without manually triggering a boolean flag.  We don't have to worry about leaving deleted subscriptions active.