Advisories for Npm/Bostr package

Even with authorized_keys is filled with allowed pubkeys, If noscraper is enabled, It will allow anyone to use bqouncer even it's pubkey is not in authorized_keys.