What about simply including the package_id in the parties table, and setting a unique constraint for (email,package_id)? Then you could set a flag in a subsite table (haven't looked into which one) indicating if it should inherit users from the parent site.
