Make sure persisted invalid orders can not be authorized
Always use method accessors instead of []
Do not authorize for some cards on the black list