support two ways of determining item key
Older? items have a keyID attribute with the key UUID. Newer? items have a securityLevel attribute where we get key from security level to key UUID mapping.