Microsoft.Data.SqlClient.SqlCommandColumnEncryptionSetting
Note that these settings cannot be used to bypass encryption and gain access to plaintext data. For details, see Always Encrypted (Database Engine).
Disabled = 3
Specifies the connection does not use Always Encrypted. Should be used if no queries sent over the connection access encrypted columns.
Enabled = 1
Enables Always Encrypted for the query.
ResultSetOnly = 2
Specifies that only the results of the command should be processed by the Always Encrypted routine in the driver. Use this value when the command has no parameters that require encryption.
Specifies that the command should default to the Always Encrypted setting in the connection string.