Encrypting At Rest (either mariadb or postgresql)?

Is anyone successfully encrypting either all or parts of the database with ERPnext?
I’m thinking especially for employee personally identifiable information protection as well as customer and supplier PII at minimum…it might be easier to implement it everywhere. Still, at first glance, it seems this is not supported at all in ERPNext out of the box. Do I have this right?