New feature: debits to unverified bank accounts fail.

Note that this is different than the old spec, which was incorrect.