Allow applications to require a minimum key mask for authorization.

theeere we go :) go ahead and clean up this check again while we're here