Block a user
Permission names are <resource>:<action>, replacing the catch-all admin permission
Fail an E2E test on anything the browser logs, in all three engines
Fail an E2E test on anything the browser logs, in all three engines