Add new DEK to encrypt database.