Adopt this PCI DSS compliance credo: Trust, but verify