Limits on Revocation in VANETs