You can now use separate encryption keys for each customer in a single hierarchical namespace enabled storage account.