Add a template for revocation Use DATETIME type to store created/expires times Require auth for the /admin and /revoke endpoints
