Needs to be addressable and replaceable to support revocations.

I did have revocations as a separate event to begin with, but was steered this way to keep it simpler and have a single event representing the current state.