Add guidance for unenrollment / revocation?

[ianbjacobs]

Hi all,

In early conversations about Secure Payment Confirmation, a question has come up: what might be necessary to "unenroll" SPC credentials? Because of the anticipated dependency on FIDO, I am wondering if there is any guidance to provide here about server-side behavior or server-to-browser communication ("Please forget this credential"?).

Thanks!