Approved emails

Members on this list (status active) may read the record. Adding/revoking writes AllowedEmail via the server-to-server key — owner only.