I used lowercase because that's what was being used in the existing payment/order infrastructure. I suspect this is because Cybersource uses the lower case codes.

I do think a uniqueness constraint there makes sense. I'll put it in.