So the UDF could say if either the job user or the switched to user is X
and X is allowed to see SSN's for the group of people in the "Y"
department then the UDF will decrypt it. Otherwise it returns a null
value or some such thing. Makes sense. And the view could incorporate
that UDF, if desired. Yeah, that makes more sense. (no sarcasm intended,
it really does make more sense).