https://www.simplyblock.io/blog/encryption-at-rest-dare/