> store the data encrypted using a secondary protocol, lose the key Thing is that you have to do this upfront. I think it's very possible to get into a situati

> store the data encrypted using a secondary protocol, lose the key Thing is that you have to do this upfront. I think it's very possible to get into a situation where the data you have to delete is in plaintext. Dropping the whole DB and recreate it from scratch is a bit hefty.