What if the CP has full disk encryption enabled, would that be in compliance with ‘encryption at rest‘?