all pii fields are encrypted on sandbox import