But you don't want the software that is capable of decrypting the DB to also be responsible for uploading to a fixed cloud service!