• I would create SQL UDF function with aes decrypt / encrypt
  • Unity catalog is coming to GA, and supports for managing access will be improved there. I haven't tested it in practice, but it should be possible to set access right for columns and some function per column.

My blog: https://databrickster.medium.com/