And in that case, would your client really want a dependency on a libration/service from an unknown indie developer when it comes to processing payments? This wouldn’t pass muster from any security audit.