Allow applications to require a minimum key mask for authorization.

Does this work out right if default is not in characters?