Protecting database data at rest: Transparent Data Encryption, Backup Encryption or Always Encrypted

The Need-to-know security principle