have an opinion about how to invalidate all statements affected by a revoke (or grant)?
A crude technique would be to simply invalidate *all* statements whenever a revoke or grant is executed. The downside would be that some statements might unnecessarily be invalidated. The upside would be that it's simple and reliable. thanks, bryan
