UnShareEnvirionment

Add a new client-side API function, UnShareEnvironment, which denies
the given environment user access to the environment.
I think we want an assert doc exists here.