CNN (or its sources) didn't confirm that the key card was actually still operational at actual AA facilities, did they? Why assume that it was still in fact working?

(The large company I once worked for issues employee ID badges which opened different sets of facilities for different hours, depending on employee classification. As a software engineer, I could get into almost any building but manufacturing, and my badge was good 24/7. So I'm not surprised that AA pilots had employee badges would open just about everything. But once an employee leaves the company, my former company's HR fairly quickly deactivates their card.)