Don't provisioning an account when user is not able to use the mail app

[kesselb]

Steps to reproduce

1. Enable the mail app only for some groups
2. Have a provisioning configuration
3. See accounts are also created for user that are unable to use the app

Expected behavior

No account is created when the user is unable to use mail.

Actual behavior

Account created.