SENTRY-345: revoke check with grant option