Remove TODOs about authorization

Since all nova database api checks that plain users has access only
to their own keys (by calling authorize_user_context), we don't need
any extra authorization here.

Change-Id: Ibeced493e094fb7c8f91bc2348187ded50667ff4