Always - Always Encrypted Doesn't Fix.

Always encrypted is actually kind of a misnomer, because it really should be always protected. If you're in a consulting capacity and your customer says, hey, just be an admin on your database, the answer should be no. Get someone who actually works for the company to do that work rather than you. You bring up an interesting point. I've had a summer experience as well, where customers wanted to make me admins of one kind or another.