Are virtualized environments harder to secure for PCI