Provisioning for De-Authentication

[sortedcord]

Auth server currently only handles approving devices but lacks removing devices from the trust chain. We need a system for manual and conditional automatic removal of devices along with the required endpoints and flows.