scan
-1 denied, 0 no key anywhere, 1 keyed and clean. A denied key ANYWHERE wins, so this cannot return on the first clean one.
-1 denied, 0 no key anywhere, 1 keyed and clean. A denied key ANYWHERE wins, so this cannot return on the first clean one.