revoke decrypt on revokes a user's decryption permission.
revoke decrypt on [ owner] table[( column[ {,column}])] from user | group | role
revoke decrypt on customer from public