Matt's ALM space: How to encrypt your Team Foundation Server data tier