Provide BYOK user experience in Business Central to enable DB encryption with BYOK

Azure SQL provides the possibility to use BYOK as a part of TDE - described on the following link:

https://docs.microsoft.com/en-us/sql/relational-databases/security/encryption/transparent-data-encryption-byok-azure-sql

As we don't allow the customer direct access to their DB, there is no way, how to setup BYOK for Dynamics 365 Business Central. The Idea is to provide the user experience directly in Business Central to support the ALM around managing this key.