How would you explain the difference between data in transit and data at rest to a non-technical stakeholder?