Can you explain how, given that an administrator who has access through the web site can access all the information in the database, and given that an exploit on the front end gets administrator access, how in the world encryption does anything to prevent this? If at any point the web server has access to the data, the game is over. Encryption does nothing.