fix(api): Don't prevent subscribing with API_KEY when there is also an owner-based rule

fix(api): Don't prevent subscribing with API_KEY when there is also an owner-based rule #92