[maxerickson]

The top level sketch is bad. They are able to go from a low privilege card to a master key. Preventing that is a pretty obvious design criteria for any multikey lock system.