Outdated docs for onion authorization instructions
Revoking a client can be done by removing their ".auth" file, however the revocation will be in effect only after the tor process gets restarted even if a SIGHUP takes place.
Revoking a key does work with sighup now.
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information