This was meant as added security for the CC processing folks and some bright MBA decided to make it a universal policy. I give it 3 months before it's restricted just to the CC processors.