To be clear they said they "could" use RevokedKeys. See my reply further down for my line of thinking.