Authorize last-resort keys

Relates to bizops#278

Authorize last-resort keys to access production AND staging/testing (assuming it's going to be handy to someone else to verify staging before acting on prod).