Email search opt in

I meant it in a CRUD sense. Of course they can delete the old email record and create a new one. But they can't, say, verify bob@mailinator.com and then update the record to say importantperson@openstax.org