Confirm access

challenges-pub requires a secret key from an entitlement token