They can throw x away after using it. Alternatively, they can cross the y off their list after matching it (making it a one-time password).

The idea is that the guards aren't malicious, just stupid.