Meant to secure all cardholder data that companies touch, PCI DSS has been perceived as both a blessing and a curse.