It's worth thinking this through one step further IMO. What kind of event would cause a private key to be compromised, so that it needs to be revoked? The mos

It's worth thinking this through one step further IMO. What kind of event would cause a private key to be compromised, so that it needs to be revoked? The most likely cases are that (1) the client machine was compromised, or (2) an un-encrypted backup was lost. In either case, I have a hard time seeing how one private key needs to be revoked but others on the same client machine don't.