Consider adding authorization revocation to admin-revoker

[aarongable]

For incident response, it can be useful to revoke (set status = 4) either pending or already-finalized Authorizations. We should look into what it would take for admin-revoker to be able to handle this case, and now efficient it could be.