https://simplyblock.io/blog/encryption-at-rest-dare/