Kill switch

Also written: kill switches

A setting that turns a risky ability off without a deploy. For the order agent, you can switch off `issue_refund` and `send_email` so it can only look things up.