When the Payment Card Industry Data Security Standards were introduced four years ago, they were received with about as much enthusiasm as a root canal.