[feature-req] Add ability for temporary external access

[inickles]

From talking to @bcantrill the other day about external RFD access and keeping our Friends of Oxide list pruned, he'd like the ability to provide temporary external access to RFDs. Our current process doesn't really provide a means for making that easy, there's just the list of user IDs/emails.