but using that private key can still grant him access to someone's traffic to their machines. isn't revocation necessary to imply security in that domain ever again?