Lookup is now based off the keyId presented in the
request headers