Require sign in for .keys endpoint on non-public instances

See merge request gitlab-org/security/gitlab!1653