From @dadooda
Explain strategy first, add concrete details as tool functionality gets implemented.
The “strategy” doesn’t change over time and is roughly like this:
- In the project, create fields for new encrypted values using regular Rails migration(s).
- Run stand-alone Transcryptor against the prepared database(s). This step should fail safe.
- Once everything settles, create migration(s) to remove old encrypted fields/data.