https://bornsql.ca/blog/transparent-data-encryption-just-security-theatre/