Random CVV sounds fun, but that's kinda in the same "fun only" space as port knocking in networking. There are real auth methods that solve this, i.e. 3D Secure.