Get the ACH authorization agreement for a (bank account, amount) tuple

Returns the ACH authorization language the caller must acknowledge before a debit. The account-holder name is masked unless the caller holds bank_account_add or bank_account_remove; the account number is masked upstream by the custodian.