https://mranv.pages.dev/posts/enterprise-database-masking-encryption/