> you can store whatever you want unencrypted on the read model. So to recap correct me if I’m wrong: You store everything encrypted. You have an api on

> you can store whatever you want unencrypted on the read model. So to recap correct me if I’m wrong: You store everything encrypted. You have an api on it which hides the encryption and shows everything unencrypted. On the unencrypted api you do joins/aggregations. RightToBeForgotten then means delete its decryption key and remove it from the in-memory api. Right?