It is how it works in my neck of the woods: internal keys are held in a key safe that RFCA/contractors can get access to by getting a key from the RFCA office. We haven’t needed to attend to let people in for a few years now.
We had it done and said we wanted more as all staff need to be able to open up and we got them. Not sure they were happy but I was less happy at the thought of just a couple of people being able to open up and only a couple ok keys means swapping back and forth, which is an absolute nonsense.
Any official comms on this one or is isolated to a Wing / Region?