Anti-spam setting.  Requires non-signed-in users to complete a captcha before adding or editing cards (where permitted).