ak-api-rbac - first stab at new rbac for act keys