Given PCI compliance requirements, which access control mechanisms must be layered to prevent unauthorized users from viewing cardholder data fields in Salesforce?