the first step is pre-personalization
skip the commit step for now
reminder to use backupfile for the ACL data too
null AES key auth before changing application key 0 (aka provisioning key) worked, but getting problems when trying to change the other keys
notes about random id
helper to calculate the settings flag (hopefully correctly)
now it works