Make pubkey_path private

It's not an action

src/api/app/controllers/source_controller.rb

@@ -158,12 +158,6 @@ def package_command
     dispatch_command(:package_command, @command)
   end
 
-  def pubkey_path
-    # check for project
-    @prj = Project.get_by_name(params[:project])
-    request.path_info + build_query_from_hash(params, [:user, :comment, :meta, :rev])
-  end
-
   # GET /source/:project/_pubkey and /_sslcert
   def show_project_pubkey
     # assemble path for backend
@@ -400,6 +394,12 @@ def show_package_issues
     render partial: 'package_issues'
   end
 
+  def pubkey_path
+    # check for project
+    @prj = Project.get_by_name(params[:project])
+    request.path_info + build_query_from_hash(params, [:user, :comment, :meta, :rev])
+  end
+
   def actually_create_incident(project)
     raise ModifyProjectNoPermission, "no permission to modify project '#{project.name}'" unless User.session!.can_modify?(project)