call dbacl with "-T email" for proper tokenization

Closes #57