add command-line script for adding/removing users from ACL groups (fixes #82)