fix upgrade: clear bad cust_refund.source_paynum before encrypting, RT#81508