On the one hand, they are lucky they didn't get shot. On the other the people who signed off on the physical access test probably are to blame, the sheriff answers to the county voters not a bureaucrat with printer. He probably should have followed up, but they did infact break they law and though it would have defeated the purpose of the pen test the sheriff, and city law enforcement should have been informed.