Allow apitoken access to 'keys' root path #726