Following the Parquet sync call this week, I've updated the design document to focus on a Phase 1 version of this mechanism (single key, per-column encryption opt in/out), as we discussed. Thanks for constructive comments and suggestions. Feel free to leave additional comments at the document.
Regards, Gidon
