Allow applications to require a minimum key mask for authorization.

Ahh. Well, it's still not going to be right, for example mask=0b101, self.mask=0b110.