docs: [L-06] revokeOperator() does not protect against the double-spending allowance attack#834