I'm currently studying SQL Server Always Encrypted feature. How can I disable column decryption to "sa" if all they have to do is add
Column Encryption Setting=enabled in the login's additional login parameters in SQL Server Management Studio?
I read articles in Google. They only said we can secure data from admins but no example how.