The promise of a good (even certified) PCI P2PE v2 solution is that the merchant does not have access to the keys which encrypted the Card Holder Data (CHD) and the Sensitive Authentication Data (SAD) allowing some to say the now encrypted CHD and encrypted SAD no longer need to be protected according to PCI DSS and allowing the encrypted data to flow around backend systems (where it would have not been stored prior to P2PE) is now okay.
My question is whether this is true? And for those that say yes, what about the PCI DSS 3.2 requirement that SAD not be stored after authorization even if encrypted? This last point is what I'm really interested in. Because the P2PE v2 spec says it does not override PCI DSS. Thoughts?