https://ones.com/blog/knowledge/securing-sql-server-data-encryption-at-rest/