Issue #23459 Issue #23937 Support external pre-auths with no card_id.

Uses:
https://github.com/xtuple/qt-client/pull/381
That's correct, they do not. That's another reason why I'd prefer we just add the check as a plpgsql file in the manifest.