[Bug]: Internal User (View Only) permissions not working, user can make keys

[tkg61]

What happened?

When creating a new user with internal viewer permissions it would be assumed they can not create a key but they currently can:

here is the admin view

here is what is seen when the user logs in:

Also there are 2 keys listed on the admin page and an automated key created when the user didn't even make a key yet...

Relevant log output

No response

Twitter / LinkedIn details

No response