[obeattie]

CVCs cannot be used for recurring payments (beyond setting the subscription up) and merchants/acquirers are forbidden from storing them at all.