An admin user should be able to delete or deny a petition that is pending email confirmation.

Consider the case or a person who begins enrollment, but never completes.

Small hole, especially if using auth, but still a hole open to DOS.