PCI DSS audits can be a nightmare or an opportunity