Allow cryptographic erasure of personal data in task variables

[zambrovski]

Scenario

• camunda-bpm-taskpool version: 4.x
• Camunda BPM version: 7.20
• Description of your use case: Currently, potential personal data information like task assignee, candidateUsers and owner (and potentially values of payload) are persisted in Task events. For GDPR reasons there should be a way to prohibit access to this data.

Current Behaviour

• No possibility. Once written, attributes will remain there forever (in the event store).

Wanted Behaviour

• Cryptographic erasure of the fields.

Possible Workarounds

• None