Do users have to verify using Plaid for every transaction if there are recurring payments? Those seem the riskiest if someone has insufficient funds on a tokenized bank account