Context

In order to get the dashboard account config from the CM, I need to send a generic claim signed with the account key pair.
If I understand this correctly, it means that in order to show the list of users who can access the dashboard of an account, we need to ask the owner to provide his account seed (so that we can create a signed AccountRequest).
This looks pretty cumbersome to me. I understand that the config is sensitive, especially as it returns the signing keys for each role. However, would it be possible to only provide the CM with the owner email (already verified thanks to federated auth) to retrieve the account config (maybe without the signing keys)?

Suggestion

we could have a non-secret version of the account config that can be viewed - that could be returned to any admin/owner.

Only the email would be required and the CM would check if the user has the required role to read the config.

The returned config should not contains the signing keys.