Enforce valid user public key tokens with read rights for address api.