For the moment I think we're all set, though the others can speak up otherwise.  Would it be possible for Pandora to try and acquire some blank cards through his "pimp", rather than on the open market?  The less of a data trail to track, the better.