Assuming it's SSL into NS - I can't see a transmission security issue. I don't know if handling those details in SuiteScript is PCI compliant though.