Transparent encryption for ActiveRecord that isn't over-engineered