[ifwinterco]

That would make sense, and I guess if you tried something suspicious (larger order to a new address), you would get the full auth flow