am 09b542f2: (-s ours) am 20642ae7: Give secondary users read-only physical cards.

* commit '09b542f269bfd0726de53c2d230c5266f5227f1c':