Authentication: Uses Secret Key for intent creation, Public Key for client-side operations
customerId: Required for saved cards; enables customerToken generation
Card Token: Encrypted stored card reference; requires CVV for each transaction
3DS Flow: Most card transactions redirect to bank's 3D Secure page
Security: CVV is never stored; only provided during confirmation