It seems from further research that the REVOKE PRIVILEGES does not cascade from the database level down, so I'll have to do explicit revocations.