Administrative invalidation of a key that should no longer be trusted because of compromise, retirement, or policy change.