Payments with AVS response codes of 'M' are not to be considered risky

Fixes #4251