this should be controllable through an attribute. there may be times in which folks would want the run to fail if they couldn't remove a user