@jmazzi true. But isn't the presence/absence of the private key at the app level? If the private key is not set when the app is started, all instances of a class which uses the encrypted column would be read only for that column. Maybe I'm picturing it incorrectly.