We should keep track of server requests in a way that allows us to detect
inactive servers, whose keys we can then revoke. The server owner should be able
to re-generate that key again though, which means we have to make a distinction
between inactive and degloballed servers.