spec: https://wicg.github.io/permissions-revoke/