actually you can still revoke access keys, but once a client has the WG info it would still be able to "connect"