What methods can securely protect client data without requiring us to hold the decryption key