https://simplyblock.cloud/blog/encryption-at-rest-dare/