Distributed Trustees and Revocability: A Framework for Internet Payment