as Colin said, if your code-key is generated in a php script on the server where your forum is, it's easy to manage a general hack that will provide a usergroup for each key generated... or the opposite, a specific field where users enter their keys (may be multiple i suppose) and if they have a proper algorythm, the usergroup is modified...