Add tests for app revocation scenarios

[bochaco]

When an application is revoked, any default container that app was having accessed to is reencrypted. We should have tests which verify the expected behaviour for when this happens, specially when more than one application has granted access to the same set of default containers, e.g. if one app is revoked a second app should be able to read the content of the default container with the new encryption keys.