New directive supersedes 2025 order, limits accounts to approved organizations and gives commanders 30 days to comply.