sqkeyuseridadd
Add a user ID.
A user ID can contain a name, like `Juliet`, or an email address, like `<juliet@example.org>`.
Historically, a name and an email address were usually combined as a single user ID, like `Juliet
<juliet@example.org>`. However, user IDs that include different information such as name and email
address are more difficult to reason about, so using distinct user IDs for name and email address is
preferred nowadays.
`sq key userid add` respects the reference time set by the top-level `--time` argument. It sets the
creation time of the user ID's binding signature to the specified time.
sqkeyuseridrevoke
Revoke a user ID.
Creates a revocation certificate for a user ID.
If `--revoker` or `--revoker-file` is provided, then that key is used to create the revocation
certificate. If that key is different from the certificate that is being revoked, this results in a
third-party revocation. This is normally only useful if the owner of the certificate designated the key
to be a designated revoker.
To revoke a user ID, the certificate must be valid under the current policy. If the certificate is not
valid under the current policy, consider revoking the whole certificate, or fixing it using `sq cert
lint` after verifying the certificate's integrity. If the certificate is valid under the current policy,
but the user ID you want to revoke isn't, you can still revoke the user ID using `--add-userid`.
`sq key userid revoke` respects the reference time set by the top-level `--time` argument. When set, it
uses the specified time instead of the current time when determining what keys are valid, and it sets the
revocation certificate's creation time to the reference time instead of the current time.