rialtate[m]The http signature header has a keyId field. If the get is signed with https://alice.example/keys/1, which you know to be `owner` https://alice.example/actor, then you know it is Alice making the request. Simple SQL query if you do it right.