Codes and credentials cost nothing to change
Where turnover is high, put group-use doors on keypads or readers. Revoking a credential or changing a code takes minutes at no cost, whereas a mechanical key issued and not returned is a permanent unknown.