Federated secret handshakes with support for revocation