To Revoke or Not to Revoke: Balancing Security with Performance and Operational Complexity