UnShareEnvirionment

Add a new client-side API function, UnShareEnvironment, which denies
the given environment user access to the environment.
I don't think we need this line here.  We shouldn't have to assert preconditions.