Apple, to my knowledge, has never revoked a single cert for config profiles since they're rarely used outside of the mobile dev market.

Any examples of them doing what you have proposed?