Access card at CERN: rules and good practice