SQL Server：如何限制对加密列的访问，甚至来自dba？

I'm new to database encryption. We have a requirement to encrypt some columns in various tables which show sensitive information. The problem we have is, the data should not be seen by anyone with access to the database or its certificate and symmetric keys (not even dbas), and only some users of the application which query the data in the database should see the information.I'm new to database encryption. We have a requi