When to revoke
Revoke when a device is retired, its configuration is exposed, responsibility changes, or the one-time password is lost.
What revocation does
The credential is marked revoked and can no longer authenticate or submit messages. Create a new connection to obtain replacement credentials.