Allow applications to require a minimum key mask for authorization.

this is not how one compares bitvectors :P