How does the cache interact with the new enemy problem? If I revoke a permission even with a consistent data store am I at risk of a bad read via the cache or do the revision numbers protect against that?