<<Security Requirement>> Encrypt sensitive data at rest ()