PCI DSS and storage of credit card data