priv: Introduce and use PRIV_VFS_REVOKE