As a follow up, and following chats on RocketChat, we have some updated defaults we think will pass PCI-DSS compliance.
Big hat tip to Catton for his work.
We'll look at posting this and updating some defaults.
Sounds good. I've been tied up for the last few months - found a work-around for the original system, but I can see it coming up more and more in the future. Not to mention that I'd like to be able to contribute to the development of SME 10. While I've got one system running Nethserver, which has a few attractive features, I find it too GUI oriented. I'm much more comfortable with SME and would like to see it get more up to date.
I'll have to find some time to come back to the Rocket chat....