Comprehensive data-at-rest protection