(1) Only employees authorized by the director may be issued keys or combinations to security files. No authorized employee may share keys or combinations with any person other than those authorized for direct access to CBI documents.