Nomos incorrectly logs api access requests as valid while it returns a 401 to the client

[TyIsI]

While using an api key that's expired and stripped of all privileges, it still shows it as valid in the (Nomos) access logs while at the same time giving an access denied (401) to the client.