One could leave the power to create , certify , and revoke keys in the hands of each user , as the original PGP design did .
This raises problems of user understanding and operation .
One could leave the power to create , certify , and revoke keys in the hands of each user , as the original PGP design did , but this raises problems of user understanding and operation .