A revoke creates an audit-logged offset row — the original grant is immutable.
Remaining: 1 Points. Leave blank to revoke full remaining.