Refined restriction of what a user can do while they have a keycard chec...

...ked out.

Closes #213