Custom AWS KMS encrypt field type When dump to the database data must be encrypted When load from the database data must be decrypted