Comment by eqvinox

> as you cannot program the keys into the card

You don't need to program the keys into the card, you program the card's identity/public key into the network.