Infrastructure

At the October 2011 AHM there was concern over providing email addresses for all registered DataONE accounts. We can redact the email when listing subjects and when displaying details for specific subjects, but there are cases when the email is useful:
-to differentiate between very similar accounts (Matt Jones vs. Mike Jones or bwilson@gmail vs. bwilson2@gmail) when setting access control rules
-to allow the yet-to-be-determined "account verifier" to actually be able to verify that the email is valid for that identity
-to allow system maintenance messages to be sent to member node administrators
-to report usage history from the log (name + email) to data package owners

Possible rules for NOT redacting emails:
* CNs can retrieve all account information
* MN admin accounts can retrieve all information
* special D1 admin accounts can retrieve all information
*these rules can specified in the registered Node-->Service-->ServiceMethodRestriction