Can development environments be in PCI scope