ironic that encrypted-at-rest but not e2ee DMs are one of th...