You can avoid that if you save only per-user encrypted content (expensive, I know). That way you just should have to revoke that key to remove access to the dat

You can avoid that if you save only per-user encrypted content (expensive, I know). That way you just should have to revoke that key to remove access to the data. Advantage is you cannot forget any old backup etc.