Rather them use certificate revogation (crl), use Certificate Login state to control access of a user to master.