I got this figured out on StackOverflow, turns out the accounts I was using were all db_owner's of that DB so they had access to the key by default.<BR><BR>Once I created a new account that wasn't a ...
You can't use wildcards in statements like you want. The easiest way for you to do what you want is to just grant the user the db_datareader role and make sure they're not part of a group with the ...