To clarify, the only thing average user is going to have access to is the rfid card itself. They will never see any mqtt messages, statistics, ACL's, or any of that. The whole process is going to be completely transparent to them.
Until I played one of the Carmen games from 1995 with Lynn Thigpen, and I found a note left behind from one of her agents, I didn't realize that Carmen pays her people too Lol