Add some developer docs on PCI compliance