Got it, in other words going beyond just a moment of someone signing up or putting in a credit card to actually continuously evaluating whether or not it looks like a user of the service may be on the list.. tricky indeed