"We use GitLab's self-hosted version [of Terraform state], so we can configure the data store behind GitLab, [where] we manage security access and encryption," said Phil Fenstermacher, manager of systems design and architecture at William and Mary, a university in Williamsburg, Va. "[But] if someone manages to get access to the files on the back end, they'd be able to read the contents as plain text. We'd like to use client-side encryption to encrypt sensitive data within the file because we can then use different encryption keys for different projects, as opposed to one for everything behind GitLab."