Reading through Bitglass's white-paper on Cloud Encryption it states, "For many organizations, control over the data should be in the hands of the security team, not the applications team." Can someone help me understand what the reasoning behind this would be?