[Security Feature] Client button to disable web setting changes.

1. Email change
2. Password change
3. Notification settings change
4. Account deletion
5. Individual device revocation ("Reset all keys" for the web login)

Can all be done via Keybase Client.......

So therefore:

Request

Add a button in the client that allows me to nuke the above 5 features from web.

User story

1. User sets up a device and logs in to the device.
2. User generates paper key and stores in safe place.
3. User saves username and password in password manager.
4. User is confident they will never get locked out.
5. User clicks a button (and confirms by writing something).
6. Client signs a message with the device key telling the keybase server to not allow this account to change the above settings from the web UI.

This will prevent an attacker from destroying accounts or tricking people who don't pay attention into letting them back into a team and stealing private info etc.

No files, tests, or entry points are named. Start by tracing the Keybase client and server handling for web email, password, notification, deletion, and device-revocation changes, then determine how a device-key-signed account policy would be represented and enforced. Done means the client control and confirmation flow work for all five settings and the server rejects web changes when enabled.