A Snowflake architect is configuring a secure data sharing setup between a provider account and a consumer account in a different region. The provider wants to share a database that contains sensitive financial data. The architect must ensure that the data is encrypted in transit and at rest, and that the consumer cannot download the shared data. Which Snowflake feature should the architect use to meet these requirements?