Revocation log

Every key and identity revocation, newest first — rendered straight from the audit log. Machine-readable feed: /api/revocations.