> --1 Move .CSV data into HDFS staging area Per-user staging areas with Kerberos auth is standard practice.
As long as you're not running a vanilla Apache install (i.e Ranger KMS + SSL certificates for KMS needed), you can encrypt users away from each other[1] or from threat of physical hardware loss. Cheers, Gopal [1] - <https://hadoop.apache.org/docs/stable/hadoop-project-dist/hadoop-hdfs/Tran sparentEncryption.html>