enable revoking credentials