added constraint for key_email that rejects existing email addresses, refs #9312