I do not trust the internet with the power of buying me whatever they want, HOWEVER, I do trust my community members. We should allow trusted community members via some sort of whitelisted permissions per their account to allow them to buy us surprise gifts. I know there is a "prevent anonymous users from buying surprise gifts", but I'd like something more specific!