I believe ephemeral keys or zero knowledge proofs may help with deleting data but it presumes every client will store only the encrypted version and consults the trusted oracle to decrypt the message.