Our old friend Mirow mentioned this a while back here:
He does mention the rotating CVV too in another thread: