Starting off with encryption for MariaDB 10.1 one was limited to using mysqldump. It wasn't too bad except the inability to easily do incremental backups. Yes this can be done, but it is not pretty and it is dumped out unencrypted, which is a deal breaker for PCI/PII scoped data. I wrote some utility code …