This isn't a bad design overall, but it looks like if ``email_categories_allowed_to_send`` (which is an extremely verbose name BTW) includes ``all`` then there's no way to turn off a specific email.  That's probably okay for now, but in the long run it'd be nice to have a special category like ``preview`` or ``pending`` or something which is never sent and only ever previewed.