Having a buyer means it should use `change_pin` rather than `create_buyer`. `change_pin` takes a `uuid` because it is used in a case where the buyer isn't available. I could change `change_pin` to take a buyer or a uuid.