Multiple commands allow you to remove decrypt defaults.
drop table
alter table .. modify .. drop col
alter table .. modify .. decrypt
alter table .. replace .. drop decrypt_default
alter table emp replace ssn drop decrypt_default
If you do not have the hr_role and select from the emp table after the table owner removed the decrypt default, SAP ASE returns error message 10330.