Encrypted Files in Data Management?

Content

Client requirements: "must ensure that file-exchange is tokenized/encrypted all the way to its consumption.  As in, this data cannot be available in an unencrypted format (not even for Data@REST at an sftp staging server) – up until its system consumption by EPBCS"

Has anyone experience with securing files in this manner?  As we understand it DM cannot "Un-Encrypt" encrypted files.