Yeah exactly. It is possible that some expiry or provider specific bug may lead to revocation? I am not sure how it works entirely.

I will say that there are some very well known backup and restore issues with keychain however so I keep anything critical in MacPass as the primary copy.