Only password fields on system entities are encrypted.
HTML/Silverlight web resources and iFrames are not supported on the tablet client.
Business Rules should be applied to all clients except minus the phone application. They are limited by form rather than security role.
Jason Lattimer
My Blog - Follow me on Twitter - LinkedIn