I think part of what's wild about that for me is just imagining the risk analysis that would lead to that kind of thing. Like, obviously not an explosion that's over in seconds, but everyone would be dead anyway. And not a normal fire because then you'd just evacuate as usual and carpool if you can't find your keys.
But there's a class of refinery-specific disasters where I guess you have tens of seconds to get out, where looking for your missing keys could well mean the difference between escaping or now.
A refinery can leak explosive gasses that form a plume in or around the refinery that rises off the ground. Once detected, there's a fairly high chance that one small spark will set it off but it could be many seconds or minutes until it's ignited and it could take multiple smaller explosions to mix in enough oxygen to cause the big one. This gives the staff "plenty" of time to evacuate but it's still an emergency situation where arguing about carpools or knocking things down frantically looking for keys (causing that spark) will eventually get people killed for no benefit.
Yup, or even if just one of the vehicles is in the way and the person with the keys is nowhere to be found it could cause a huge problem during an evacuation.
You've touched on something else that I found extraordinarily impressive there: how amazingly thorough their risk analysis process is and how well thought out their mitigation plans are. When they had the problem I came to help work through (not immediately safety critical, but a big deal, intentionally being vague here), step one was to reach up to the shelf and grab the binder labelled "Business Continuity Plan: Problem $X" and start executing the plan from page 1. It wasn't a plan to fix the problem so much as a plan for how to continue operations until the issue was fixed. Very very impressive.
I learned a lot on that gig, and it's really helped influence the way I think about business "disaster planning", whether caused by floods, or data centres burning down, or a rogue sysadmin deleting backups, or whatever. That industry is 100% the opposite of "cowboy".
But there's a class of refinery-specific disasters where I guess you have tens of seconds to get out, where looking for your missing keys could well mean the difference between escaping or now.