Anyone who's implemented NIP-09 is most of the way there already - revocation is just a deletion request for every event by that key.