Always Encrypted – SQL Server transparent encryption with keys only on client (msdn.microsoft.com)