Returns one person's stored settings. There is no 404: a person with no settings, or no such person, returns an empty array. An API key with the User role may only ask about its own ID — which is the key itself, not the person who created it.