https://www.tiagoneves.net/blog/sql-server-2016-always-encrypted/