Deny a role identified by an email address.

def deny_role(role):
    """Deny a role identified by an email address."""
    def processor(action, argument):
        db.session.add(
            ActionRoles.deny(action, argument=argument, role_id=role.id)
        )
    return processor