> the keys never leave the phones, and the record of who did what can be checked with a script that has no Seal in it.

What happens if someone loses their phone or buys a new phone? What happens if they forget to tell you that they need a new key?