I could have sworn that I read that Deny the Witch only needs enough successes to nullify enough of their successes to fail. In other Words, if I cast a WC3 spell, and get three successes, and you Deny 1, I no longer have the three successes I need....