fix: handle revocation 401 gracefully, add retry on 400/404, improve policy error messages, fix docs

fix: handle revocation 401 gracefully, add retry on 400/404, improve policy error messages, fix docs #7