Fidelity does it. I've had to explicitly decline 'voice authorization' multiple times.