Why one retailer is migrating away from encryption to protect customer data