https://ones.com/blog/maximizing-security-data-encryption-at-rest-salesforce/