Clarify that auto_capture? false still does authorization.