Attempt to account for characters no longer appearing for a key

The first scenario that come to mind is a character transfer, but I don't have the PLEX on hand (now the disposable PLEX) to test it out.
Grant checking now pulls all API keys, then checks validity

Trying to account for the case where a user loses access to a character as part the API checks during authorization.