"Mechanical key control is every bit as important to overall security goals as alarm systems, security video and a security officer patrol. Just as an end user painstakingly thinks through numerous elements of those latter programs, the same attention must be paid to key control."