Revoke access key

Revokes an access key. Revocation is permanent. The calling key may only revoke itself or keys within its own scope; anything else returns 403. The organization’s last unrestricted production key cannot be revoked and returns 400; create a replacement key first, or regenerate it instead.