Gravar-mail: Shouldn't patients decide who should access their records?