Which of the following is a key requirement for protecting cardholder data in transit according to PCI DSS?