Changes one credential's status: suspend, reinstate (from suspended only) or revoke, which is final.
{ idx, action }
which surface asked, for the audit row
{ ok, message }, or a refusal carrying its error code
{ ok, message }
Changes one credential's status: suspend, reinstate (from suspended only) or revoke, which is final.