Removes email addresses or patterns from an access policy and,
by default, revokes any active sign-ins the departing emails have
made through modules gated by this policy.
When true (default), active sign-ins associated with the removed
emails are revoked. Set false to leave existing sessions intact
and only prevent future sign-ins.