There's no access right for this, which seems like the logical place. The only place to control email is the Export feature right, which is a global flag. It's possible you could do something like by locking down Export completely and using Business Processes, but it would be sticky. I've been struggling with this idea myself.