The test itself lies in attempting to apply this new update to a card belonging to Judas, whom is a legitimate user of the system.
Is Judas considered the subject or the object? I'm considering Judas to be the object and hence applying whom after the comma. Is this correct?
I read about whom vs who at LINK, but I'm not sure if I'm applying it correctly to this case. I've also tried the whom+him test by asking Whom does the card belong to? with the answer It belongs to him.