Know exactly which machines can sync

Inspect registrations, approve by fingerprint, and revoke explicitly.