module "encryption-at-rest" {