Does the Always Encrypted certificates get copied over in availability groups? We have a column set up with Always Encrypted, and we are adding it to an AG.  We'd like for the encryption to keep working if/when we have to fail over to a secondary server.  Will the Availability Group copy over the certificates, or do we need to install them by hand?
In AlwaysEncrypted, the keys are not stored on the server to begin with.