This shields data from unauthorized obtain even from database directors at your company or at your cloud provider who have immediate access to the technique, but never need to look at the underlying data.  In the event your app is employing a managed identification, the function assignment from preceding phase, it is going to immediately safe the