you cant hide data from dba's - you can only encrypt it