fix: guard POST keywords & allow co-maintainers to see keyword form
This addresses a severe security issue, which is omitted from this git message for obscurity purposes. Otherwise, it allows co-maintainers to see the keyword form when viewing a package they co-maintain. Closes #380 Signed-off-by: Kevin Morris <kevr@0cost.org>