Encrypt all data in transit between workloads, at rest on disks, and in use where confidential computing allows.