Revoking a policy from the user