Add CORS headers to /keys just for kicks.