If this counts as PCI compliance, I'm doing way too much work... How does this possibly count?