project.config: set Blocked Users access to BLOCK

This should be a noop, but is more correct in that projects inheriting
the policy can't override it.

Change-Id: I03d75e624821b73c1110940a42f8c67d029ed9e3