How should cardholder data be handled during transmission