db encryption
full test coverage