rules: # this doesn't handle custom prefix, suffix, attribute - name: attr_encrypted defines: - argument: 1 calls: - argument: 1 transforms: - add_prefix: encrypted_ - add_prefix: encrypted_ add_suffix: _iv - arguments: - encryptor - encrypt_method - decrypt_method - key