bfc843bc52
- Change `sq key userid revoke` to require the certificate be valid under the current policy. If the certificate is not valid under the current policy, the user should revoke the whole certificate, or fix it using `sq cert lint` after verifying the certificate's integrity. If the certificate is valid under the current policy, but the user ID to revoke isn't, it can still be revoked using `--userid-or-add`. - See #375.