Should PCI compliance include client-side protection? | Hacker News Reader