anchor.diff:  %%% The webui public key is fetched from the chef_keyring service. The 'X-Ops-WebKey-Tag'
   %%% header specifies which key id to use, or we use the 'default' key if it is missing.
   %%%
  -select_user_or_webui_key(Req, KeyData) ->
  +select_user_or_webui_key(Req, Requestor) ->
       %% Request origin is determined by the X-Ops-Request-Source header.  This is still secure
       %% because the request needs to have been signed with the webui private key.
       case wrq:get_req_header("x-ops-request-source", Req) of
  
positive.code:                     throw({no_such_key, WebKeyTag})
              end;
          _Else ->
              KeyData
      end.
  
  -spec body_not_too_big(#wm_reqdata{}) -> #wm_reqdata{}.
  
negative.code: authz_id(#chef_user{authz_id = AuthzId}) ->
      AuthzId.
  
  -spec public_key(#chef_user{} | #chef_client{}) -> binary().
  public_key(#chef_user{public_key = PublicKey}) ->
      PublicKey;
  public_key(#chef_client{public_key = PublicKey}) ->
      PublicKey.
  