Allow applications to require a minimum key mask for authorization.

yeah, math is hard...