managers can now grant revoke access
users can update their keys and it will be replicated on servers
users and managers have a message inbox