[dom0]

The point was that you probably shouldn't use it for data encryption in the DB and think the server doesn't have the keys.