The revoking section is a little cloudy as written - revoking a device should be possible with an announcement from any other device (so as to not fail if someone steals your laptop and your phone can not contact the server directly), but not possible to be done by a thief (so devices should have a password-protected key for revocation).