https://mranv.pages.dev/posts/database-master-keys-encryption/