Apple/Google Wallet pass that updates itself.
Like everything in HubPMS, Wallet Magic Key works through the same public API the app runs on, respects per-user permissions, and writes every meaningful action to an immutable event log — so you can always answer "who did what, when".