Kosta take a look at the Cloudflare docs on implementing PCI DSS at zone level or per hostname if your using their DNS. I'm not sure if you change ciphers and settings required in Enhance they will be overwritten with updates, for that you would need to check with support.
Would be great to see an option in the CLI to enable PCI compliance settings like in Plesk.
