You can revoke a user’s decryption permission using:
revoke decrypt on [ owner.] table[( column[ {,column}])] from user | group | role
For example:
revoke decrypt on customer from public
