Which access control system architecture processes authentication decisions at the door-level hardware rather than a central server?