stronger divert-to-card test case
show authenticate flag in logs
nicer code in key import for flag log types