Is there a way to encrypt the events across the wire?

Also, is there a way to encrypt the events while at rest?

If not, is encryption on the roadmap? If so, is there a timeframe
for implementing it?

I am working in the healthcare space in the US, and have a requirement
to encrypt the data both at rest and across the wire.

For http just put a ssl gateway in front there are a ton of projects that do this. Even on same box). For tcp trickier but tunnel over ssh could work now.

What about on-disk/at-rest? Is that on the roadmap?

Let me benchmark on an encrypted file system and get back to you with results

To be clear many of our decisions have been made to allow compsibility of these things we just havnt benchmarked all of them.