PCI-governed PAN data