Encrypting data at Rest is achievable

See other discussion: "Indexing encrypted documents"