https://endsze.blogspot.com/2023/05/end-user-encryption-key-protection.html