Encrypt data at rest using a password you control. The encryption key can be fetched from the service when signed in or provided manually.