@matt is "subjective identities" really about key revocation?