Could you elaborate on your bullet point about TDE not encrypting databases used in replication topologies? I'm thinking specifically of log-shipping.