More powerful ACL; grant and revoke in bulk by comma-delimited email addresses.