Such subsystem can interface with the VPN 210 and can respond to provide authorization service on behalf of issuer 214 when, e.g., the issuer is a member or other customer or entity not connected via the VPN, is unavailable, cannot be reached, or responds late (for example, outside the time limits specified by the network).