Field-level encryption: choosing the layer that has to hold

Envelope encryption, the search and index problems it creates, and how to pick the encryption layer that matches your trust boundary.