Add is_risky? methods to payment for AVS/CVV + specs