Revoke sub user

Revokes (soft-destroys) a sub user. An administrator may revoke any sub user in the account; a non-administrator only their own. Sub users themselves are refused entirely.