Man page no longer accurate for onion authorization instructions
Outdated:
Client Authorization
Revoking a client can be done by removing their ".auth" file, however the revocation will be in effect only after the tor process gets restarted even if a SIGHUP takes place.
Revoking a key does work with sighup now.
Edited by Roger Dingledine