authenticate keys against a json document.