add unauthorized error if trying to view api keys for an unowned channel