Ability to SELECT_DATA from Vault for Sage Gateway? (Passing in store GUID)

[benparsell]

Hi!

I'm running into an issue where after running a store operation and holding onto the GUID from the sagepayments API and trying to authorize, my application passes in the GUID token as a string under the credit_card parameter for the add_credit_card method where it expects that parameter to be a full CC object.

At what point would this class run a SELECT_DATA operation from the sagepayments API to pull down CC data from the vault? Is that an expectation of the user's application and then passing a full credit_card object to this class (that seems like a potential security concern)? Would it make sense for me to decorate the add_credit_card method to run my own SELECT_DATA operation if I know that the credit_card parameter is a string?