I was disappointed with the whole concept of Sherlock getting into the top secret facility with the card stolen from his brother. He stated that he had stolen it some time before, I would think Mycroft would have noticed it was missing and had it disabled. Even if he hadn't, no security system guarding anything as sensitive as chemical warfare would allow the use of a card without a PIN number. They would probably even require regular changes to PIN numbers.