Revokes the API key identified by keyId, provided it is owned by the currently authenticated principal.