convert admin key lookups to use get_client_public_key