We should configure outbound email so that bounces go back to Allura and can be associated with specific users (and ticket/forum monitoring). After a certain number of bounces, automatically disable email sending to that address. Maybe it doesn't have to be associated with a user or monitoring config, but could be a separate bad-addresses collection. But then we'd need a way to occasionally let users re-enable their own address.