Return {shutdown, creds_revoked} on cert revoked