diff --git a/webserver/api.go b/webserver/api.go
index 13f4910..dc7e91f 100644
--- a/webserver/api.go
+++ b/webserver/api.go
@@ -501,7 +501,7 @@ type jwkset = struct {
 }
 
 func keysHandler(w http.ResponseWriter, r *http.Request, g string) {
-	if apiCORS(w, r, "HEAD, GET") {
+	if apiCORS(w, r, "PUT, DELETE") {
 		return
 	}
 	if !checkAdmin(w, r) {