the zedtoken is encoded from a revision; if that fails, the server should panic