stripe: do not accept payments from unverified accounts