We obsess over TLS. We lock down data *in transit*, but what about when the data stops moving? That is where **encryption at rest** comes in, and it is easy to misunderstand.