- lockbox access result does not need to list grant information since that kind of information is now determined via the grant service
- moved lockbox access validate to last spot since it's a validation routine that can be used by other services