Don't use the keys for access.

Revocation seems fairly simple on nostr. Not sure what needs explaining. 

The hard part of nostr delegation is the UX since keys are displayed to end users