Fix buglets introduced by restricting /settings/ access to certain keys