package revocation