Existing sensitive-card-details protocol; decryption is required (https://docs.dogpay.com/docs/get-card-pan#/). Current limitation: this route has no explicit-permission declaration, so explicit_permissions credentials cannot call it. Confirm access before offering card-detail display; do not switch authorization mode to bypass the restriction.