diff --git a/config/config.go b/config/config.go
index 1928bdbf513429008e38468b929dc28e7327d8d0..7046a52b71320b70ae02ead37877ce65b0441846 100644
--- a/config/config.go
+++ b/config/config.go
@@ -96,10 +96,11 @@ func NewConfig(cfg *config.Config) (*Config, error) {
 	c.Host = cfg.Host
 	c.Port = port
 	c.Source = rs
+	// Grant read-write access when no keys are provided.
 	if len(pks) == 0 {
 		anonAccess = "read-write"
 	} else {
-		anonAccess = "no-access"
+		anonAccess = "read-only"
 	}
 	if host == "" {
 		displayHost = "localhost"