devices

What revoking does: it removes that device's key from this machine's own table, and the door closes at once - no restart, and any session that device is holding ends with it (this one included, if you revoke the device you are reading this on).

What it does NOT do: it takes nothing back. It does not change what that phone can already reach over the network - the relay half of remote access is not built yet, so nothing here switches a machine off. Revoking takes away a KEY, not a machine: the phone can pair again with a fresh code printed by the terminal loomd is running in.