Vendors exist explicitly for this, like accessgrid.com - they have the entitlement / permission from Apple to make passes in wallet.app open doors.