selfservice-require_cvv configuration option, RT#28486