Thanks Josh. Is it in the product map to certify Hbase-provided encryption? For existing clusters, to encrypt data, Hbase provided encryption entails much smaller downtime. We have 430tb, and to distcp to encrypted zone would take many hours, if not days. With Hbase, we can run major compact online during low peak hours.