https://ones.com/blog/securing-sql-server-data-encryption-at-rest/