If you don't store it you get to skip Req 3 basically. You still have most of the other 11 Requirements to worry about... Multi-key strong encryption and key rotation isn't that hard... The policies, documentation, and other areas are harder imho.