Feature: enduser can revoke authorization