Brilliant post on per-user encryption in the cloud by Yaron Goland, with a sobering conclusion: goland.org/esplannercloud/