encryption

Customer managed key encryption, can be enabled or disabled