- deny user to user notifications
- clean endpoints