Created role "Ally webservice" is based on teacher role has has some unfortunate capabilities set

[thepurpleblob]

The Ally webservice role is essentially a copy of the teacher role. This creates a sitewide teacher when assigned.

The problem is that this has caps like mod/checklist:emailoncomplete and mod/feedback:receivemail enabled. This can result in emails being sent to the dummy email address filling up the mail system with email bounces.