Understanding the New PCI DSS Scoping Supplement