Deny impersonation for JScript custom actions.